Unfortunately, we will NOT be selling the "Spot the Vuln" shirts we mentioned on the podcast. Its just due to some tax things I don't have the time to deal with right now, maybe next year.
If you're willing to put in some effort though what follows is basically a tutorial on recreating the shirt within Printify so you can order it from a producer yourself.
Printify is kind-of a drop-shipping system for custom clothing. You can create a product that will be fulfilled by some producer. You can then issue orders manually from that producer for the shirt, or hook up an external store and have orders automatically sent to the producer.
I also want to make clear that I have not yet recieved my own order of the shirt so I cannot comment on the quality of the print or end result. The mock-ups look great but I'm sure the end results might deviate. I'll update when I do get my order in.
Men's Polyester Tee (AOP)
which should only have one result. That is "Fulfilled by Miami Sublimation." Select it by clicking on it.There are two shirts however most of the design process is the same for both.
First, you'll need a copy of the design assets for the shirt, all of the files mentioned in the tutorial can be found in this zip: shirt-assets.zip
static.png
image, and a menu form under it with "width" and "height" options. If this isin't visible just click on the entry and it should expand.stv-logo.png
.This is the part that changes between shirts. You have two options:
justbepositive.png
- This is the memory corruption vulnerability.regex.png
- This is our bounty-style vulnerable code. See if you can spot the vuln, otherwise I'll put the solutions up in a separate post. Choose the image you want.
justbepositive.png
regex.png
The last step is to just repeat the steps for the "Spot the Vuln" text, and your chosen code image on the "Back Side". The values are exactly the same you just need to add the assets again and place them on the back.
With the above steps done, if you active the "All Areas" view, you should see something similar to the above image.
The product should now appear in your "My Products" page and can be ordered.
An annoying process to be sure, but I hope it worked for you.
See you all at DEF CON o/