Amature CTF

[TheCotMan]

well then since evrybody thinks it such a good idea... lol who do i talk to about getting "offical consent" to run the contest ?

(DT)

lol guess ill try again since my previous message went un answered.

Have you been able to get consent for this to be a contest? Running an event is much easier when you have links from the main site for official and unofficial events.

[latency]

(DT)



Have you been able to get consent for this to be a contest? Running an event is much easier when you have links from the main site for official and unofficial events.

My guess is yes, as the e-mail forwarded on ISN regarding CTF at defcon includes notice of an "unofficial" amateur CTF run by Virus-X

So assuming "vyrus"=Virus-X..it looks like this has become a reality. Nice work. Looking forward to it.

COMPETE [unofficially]!

The "unofficial" Capture the Flag, Amateur Edition has been born.
Over the years CTF has evolved and matured, raising the bar on
participant's skill levels and increasing the difficulty to enter the
game. While this has resulted in impressive players and teams, it has
been increasingly difficult for the "average Joe hacker" to have some
fun and test their skills.

Amateur CTF will be open to all participants in a format that closer
resembles early DEFCON CTF games. There will be no official teams, so
make sure that you bring extra caffeine the only thing keeping you
from winning is sleep and skill. Virus-X will be your host.

[Bounty]

Just wondering if this is still real, I haven't noticed anything on the defcon.org site. Other contests look like they're posted etc.

-Bounty

[TheCotMan]

Just wondering if this is still real, I haven't noticed anything on the defcon.org site. Other contests look like they're posted etc.

Putting things together, here is what I have been able to find.
DC949 is mentioned in the first post here by Virus.
A search on google for 'defcon "amature CTF"' provides only 4 links and one is to:
http://dc949.diseasedmind.com/forum/
Right now that forum's links "contain no data" (maybe doing a backup or offline)
The google cache shows there is a forum session called Amature CTF, but that is also not available ATM. "Contains no data."

An official webpage with rules would be a good idea. Bothering DT to get a link to it (like other unofficial events) would be good to see, and soon.

Then there is this story about their site being down from January of 2004

[Vyrus]

Putting things together, here is what I have been able to find.
DC949 is mentioned in the first post here by Virus.
A search on google for 'defcon "amature CTF"' provides only 4 links and one is to:
http://dc949.diseasedmind.com/forum/
Right now that forum's links "contain no data" (maybe doing a backup or offline)
The google cache shows there is a forum session called Amature CTF, but that is also not available ATM. "Contains no data."

An official webpage with rules would be a good idea. Bothering DT to get a link to it (like other unofficial events) would be good to see, and soon.

Then there is this story about their site being down from January of 2004

1st, the "offical site" you speek of will be posted as soon as i finilise my defcon arrangements (rooms and rides and such)

2nd the forms got hacked lol (some kiddy with a phpbb sploit crashed the damn thing), but we salvaged the site and fixed the problem... so yea try that google search now :P

3rd) adam and i (mostly adam on the public faze) are now running dc949, blackwave is MIA and has been for some time, so we took it over :P

[TheCotMan]

1st, the "offical site" you speek of will be posted as soon as i finilise my defcon arrangements (rooms and rides and such)

Excellent.

2nd the forms got hacked lol (some kiddy with a phpbb sploit crashed the damn thing), but we salvaged the site and fixed the problem... so yea try that google search now :P

If it was fixed before, it looks like it might be broken again. :-/ (checked at around 11:20pm PDT today)

3rd) adam and i (mostly adam on the public faze) are now running dc949, blackwave is MIA and has been for some time, so we took it over :P

That explains the change in the site name.

Only advice to offer: There are only about 2 months before the con... "Getting the word out" is something best done sooner rather than later, or you may not have a very big turn-out. (This is peer pressure. ;-)

[Bounty]

1st, the "offical site" you speek of will be posted as soon as i finilise my defcon arrangements (rooms and rides and such)

2nd the forms got hacked lol (some kiddy with a phpbb sploit crashed the damn thing), but we salvaged the site and fixed the problem... so yea try that google search now :P

3rd) adam and i (mostly adam on the public faze) are now running dc949, blackwave is MIA and has been for some time, so we took it over :P

With about a month and a half to go, I was wondering how it's going? I see that you have some info in your forums about rules etc. Are you still planning on running an Ameture CTF? If so it might be a good idea to post some of the info you had in your forums here. Then everyone can chip in 2 cents... and bring this thread back to life?

-Bounty

[dYn4mic]

I'd also like to see this happen and I'm hoping to see some good info/updates soon.....

[Bounty]

2.5 weeks to go, is this version dead?

Hey, with only 2.5 weeks to go or so, is this dead? Should we start trying to make some alternate thing we can do/play with? Even if it's not scored etc. I'd love to play in some sandboxes that people have setup. At this point I'm planning on bringing a box that can quickly load up some different configs of windoze and linux etc. for anyone to play with. Anyone else planning on doing something similar? Any other ideas... ? Maybe we should all put our stuff up on the wireless with "Ameture CTF" as the SSID etc. Obviously wireless coverage would be only be in certain areas based on which room you end up with, but if enough people do this, then there should be a ACTF box neaby to play with.

Anyways... enough rambling... thoughts commets etc would be kewl... maybe in a new thread?

[skroo]

Maybe we should all put our stuff up on the wireless with "Ameture CTF" as the SSID etc. Obviously wireless coverage would be only be in certain areas based on which room you end up with, but if enough people do this, then there should be a ACTF box neaby to play with.

Ehh... You probably want to go wired for this one, and preferably with no connectivity back to the main network. Bear in mind that anything spewing RF or connected to an ethernet port is fair game.

Anyways... enough rambling... thoughts commets etc would be kewl... maybe in a new thread?

It'd be a great way to backdoor the ridiculously trusting... "Here, hack this box! It's a distraction! Now, don't pay any attention while I install this rootkit..."

[Bounty]

Ehh... You probably want to go wired for this one, and preferably with no connectivity back to the main network. Bear in mind that anything spewing RF or connected to an ethernet port is fair game.

I'm still thinking wireless is the way to go with an option for 802.3 connections. I agree, it doesn't have to connect to another network.... With wireless you get easy access and some anonimity... (server and client) you don't have to have a physical box sitting in the hallways outside your room. You don't necessarily have people staring at you as you fumble around. If someone takes down your wireless, kewl.... they can probably take down your ethernet too.

It'd be a great way to backdoor the ridiculously trusting... "Here, hack this box! It's a distraction! Now, don't pay any attention while I install this rootkit..."

You should pay attention to *ANY* network you connect to (at DC), so any computer network based contest is going to have that issue. And trusting people probably shouldn't be there :>

[TheCotMan]

You should pay attention to *ANY* network you connect to (at DC), so any computer network based contest is going to have that issue. And trusting people probably shouldn't be there :>

Why to not have it just wireless:
* Interfere with existing wireless networks (range/use/interference)
* Risk for DoS is higher
* Risk for remote attacks (out of sight, and more difficult to locate)
* Risk for peer-based MiM attacks as demonstrated last year, or the year before with web browsing.

Advantages to having it just wired:
* You can track nodes on your network easier than 802.11*
* You can choose to have your network be at decreased risk for DoS by "outsiders" of the game.
* You can choose to not have this connected to the rest of the network if necessary (should people be upset with loss of network conttectivity traced to users in this game)

Is conveinience the only reason to go wireless?

I visited the links I provided in an earlier post that direct you to the organizer's forum for this contest, and I do not see any new posts there.
If you check vyrus' info [on that forum], you see that he/she listed MSN Messenger ID "Vyrus0001" [And his/her AIM ID and YIM ID are in his profile here]
Last post there by him was on "Sun Jun 05, 2005 2:25 pm" which is more recent than his activity here.
A website is listed in his/her profile on the other forums in his/her profile, but not much there but a DocumentRoot with one file in it, and that file has a date/timestamp of Jun 29, 2005 (assuming this is even his/hers.)

These bits of info suggest he/she has been around, but has not read the forums here in a while.

I would suggest posting your questions here if you want them answered-- activity there is much more recent than here.

[Vyrus]

We Are Alive :p

ok well it seems that due to my lack of poasting, many people have assumed that amiture CTF had died... this is FALSE :P, we are alive an kicking and the contest is still on. for details see http://dc949.diseasedmind.com/forum/viewtopic.php?t=34

[skroo]

You should pay attention to *ANY* network you connect to (at DC), so any computer network based contest is going to have that issue.

I think you may have missed my point a bit in saying that wireless should be avoided for connectivity back to the main CTF network - cotman's pretty much made them for me, so I'll skip reiterating them. The main thing to consider here is that if you can't control the environment, you can't control the game, and it's hard to send deauth frames to a wired switch that'll take it down.

And trusting people probably shouldn't be there :>

For three days out of the year, Defcon hosts what is probably the single most hostile network envrionment on the planet. If you're dumb enough to plug into it, you pretty much deserve what you get.

[russ]

Where can people sign up for ACTF once they are onsite? <wink wink nudge nudge>

ok well it seems that due to my lack of poasting, many people have assumed that amiture CTF had died... this is FALSE :P, we are alive an kicking and the contest is still on. for details see http://dc949.diseasedmind.com/forum/viewtopic.php?t=34