Description

This CTF is for assessing the students of Offensive Security and Penetration Testing Track, a program that was organized for 3 months by the ITI and NBE.

Conditions

⚔ Platform Rules ⚔

• Sharing the flags between different teams is prohibited.
• Brute Force attacks on the challenges submission portal or challenges links are not allowed.
• Any attack against the site or the hosted servers will be observed and the player will be banned from participating in the CTF immediately.
• Organizers have the authority to disqualify teams for any unethical behaviour or any attempt to interrupt the CTF.
• All types of electronic communication (including Discord, ftp, remote desktop etc) and use of mobile phones is prohibited.
• Organizers can verify the activity, steps/logs of the participant/team which would be performed to get a flag.
  

⚔ Attack and Defense Rules⚔

TEAMS GOAL:

• Gain root access to the target machine, and inserting the team name inside the hacked.txt file [This file can be accessed through port 80]
• keeping team name inside the hacked.txt file and patching the vulnerable services. [there might be more than one path to get a root access]

TEAMS ARE ALLOWED TO:

• Attacking the Targets (Machines) IPs, and patching the vulnerable services / applications.

TEAMS ARE PROHIBITED FROM:

• Attack the game infrastructure operated by organizers.
• Generate large amount of traffic that poses a threat to network stability of any other team
• Generate large amount of traffic that poses a threat to network stability of the target machine
• Removing hacked.txtfile [which will affect your score]
• Stopping / disabling running services [which will affect your score]

SCORING SYSTEM:

• Once you insert your team name inside hacked.txt, 25 points will be added to the team score.
• Every minute of maintaining access to the target machine [team name still in the hacked.txt] you will get more 5 points.
• Removing / disabling any running service will result in deducting some amount of points from the team score.
• Inserting multiple team names won’t get you or the other team any additional points.

 Prizes

TBD