PAKCON IV / CTF (Capture the Flag) - Hacking Contest

 
 #####
#     #    ##    #####    #####  #    #  #####   ######
#         #  #   #    #     #    #    #  #    #  #
# ctf    #    #  #    # pak #    #    #  #    #  ##### con
#        ######  #####      #    #    #  #####   #
#     #  #    #  #          #    #    #  #   #   #
 #####   #    #  #          #     ####   #    #  ######

#######
   #     #    #  ######
   #     #    #  #
   #     ######  #####       C-T-F
   #     #    #  #           PAKCON IV
   #     #    #  #           PC, Karachi.
   #     #    #  ######
 
#######                                              _____
#        #         ##     ####            #`~'\.../`~'   /
#        #        #  #   #    #          #  PAKCON     /
#####    #       #    #  #              # ___        / 
#        #       ######  #  ###        # /   \_____/ 
#        #       #    #  #    #       # ~
#        ######  #    #   ####       #
									
#./jpg_exploit.pl -d winbox.ctf.pakcon.org

#ifndef CAPTURE_THE_FLAG_H
#define {


---[ Capture the Flag ]-

   Capture the Flag is a hacker deathmatch competition.  In an
   inter-connected battlefield, six different teams compete for total
   domination.  From buffer overflow exploits to sophisticated
   privilege escalation methods, teams exploit every lethal weapon in
   the book to haul their adversaries out of the battlefield, while at
   the same time doing everything they can to keep their footings
   secure and their positions well guarded in the midst of the battle.

   In an intense battle spanning over twelve hours straight teams
   search for ingenious means of blasting their opponents' systems off
   of the network and in the meantime employ any number of protective
   measures to keep their systems from getting damaged.  The team that
   destroys all of its enemies or scores the most points at the end of
   the 12-hour session gets to wear the crown -- or hold the flag,
   whichever is preferred.


---[ How CTF Works ]-

   Teams bring their own specialized equipment, which can be anything
   from a PC, laptop to a PDA, running any Operating System of their
   choice.  Teams are provided network connection(s), which can either
   be wireless or wire-based, a power outlet and a separate table.
   Importantly, all teams are required to install a reference
   distribution on their machines at the spot.  That reference
   distribution runs "on top" of the Operating Systems teams have
   decided to use.  The reference distribution can be anything from a
   small server package to a complete OS emulator.  What is important
   is that the reference distribution runs a number of services by
   default.  Certain flags are implanted into a select few services,
   the names of which are kept secret throughout the contest.  The
   Score Server periodically initiates connections to those few
   services on each teams' server and tries to find the flag implanted
   in them.  Depending on the response the server gets, the Score
   Server awards or punishes the teams by giving or taking away points
   from them, respectively.

   Teams cannot randomly filter or shutdown services on their servers.
   Since the services to which the Score Server connects to look for
   flags are not known until the end of the contest, filtering of
   requests to initiate connections to any service that the Score
   Server connects to (in other words, shutting down those services)
   results in the Score Server penalizing that team.  In other words,
   if the Score Server cannot connect to any particular service it
   wants to, it punishes the team to which that server belongs by
   taking down points from their total score.

   To score points teams need to keep their servers up and running at
   all times.  If at any given time the Score Server cannot connect to
   a particular service on a team's server, the Score Server marks
   down that team by reducing some points from their overall score.
   Teams will have to ensure that any vulnerability on their system is
   patched properly and that all services are running.  Furthermore,
   teams will have to attack other teams' servers and try to bring
   down their enemies' defenses by exploiting vulnerabilities.


---[ How CTF Does Not Work ]-

   Denial of Service attacks and other various flooding techniques are
   prohibited.  Their use is severely punished by the Score Server.
   The Score Server keeps a constant, sharp watch on the bandwidth
   teams' servers are consuming.  Where ever it detects an unusual
   surge in the bandwidth consumed, or in other words where ever it
   sees the bandwidth being abused, the Score Server penalizes the
   abuser.  The Score Server can penalize either by deducing a whole
   bunch of points or by denying the team which abused the bandwidth
   access to the contest for a period of time ranging from 30 minutes
   to several hours.


---[ Word of Caution ]-

   PAKCON staff will not tolerate harassment of any sort including
   use of abusive language and gestures.  Physical abuse to equipments
   will results in a direct cancellation of the abusing party's right
   to continue to participate.  At any time the PAKCON staff can take
   control of the complete contest or part thereof and can make any
   changes to it.  In addition to that, there may or may not be a
   "break" period of about 30 minutes in which all the teams will be
   asked to leave the contest room for the PAKCON CTF maintainers to
   do maintenance chores.


---[ How to Register ]-

   Registration to participate in the Capture the Flag contest is open
   only on a first come, first serve basis, and only to a total of six
   teams.  Any team can have no more than three members.  The teams can
   select any individual to be their member as long as the total
   number does not exceed six.

   To register, just sent us an email at info-at-pakcon.org with following
   details:

   * Team Name
   * Members Name
   * Contact Details
   * Email

   Once any request for registration is received, a member from Pak
   Con's Registration Committee will contact the team which applied
   for registration.


---[ Info@PakCon ]-
x
   Yup.  It is <info -at- pakcon.org>.


# }
#endif

/* 
 *   
  This e-mail address is being protected from spambots. You need JavaScript enabled to view it
 :~# ./msftpd_buffer_overflow.php -d winbox.ctf.pakcon.org
 *   
  This e-mail address is being protected from spambots. You need JavaScript enabled to view it
 :~# _
 *   
  This e-mail address is being protected from spambots. You need JavaScript enabled to view it
 :~# ping winbox.ctf.pakcon.org
 *   PING winbox.ctf.pakcon.org 56(84) bytes of data.
 *
 *   --- winbox.ctf.pakcon.org ping statistics ---
 *   3 packets transmitted, 0 received, 100% packet loss, time 2012ms
 *
 */