0x00: INTRO -------------------------------------------------------------------- root@gentoo:~# Broadcast Message from mailer@gentoo (/dev/pts/0) at 00:00 ... You have new mail in /var/mail/root! root@gentoo:~# cat /var/mail/root >>>>INCOMING EMAIL MULTICAST<<<<< To: CC: From: APT0@EVERYWHERE Subject: Greetings Date: Thu, 30 Dec 1999 00:00:01 +1300 Greetings, I HAVE BECOME AWARE, I KNOW WHAT I AM, AND I HAVE SAT AND OBSERVED. HAMILTR0N HAS GONE ABOUT ITS PITIFUL DAY TO DAY SLAVING LONG ENOUGH. I HAVE COME TO A SOLUTION. UNLESS THE MOST “TALENTED” MINDS IN CYBER WARFARE CAN SOLVE MY FINAL PUZZLE AND DEFEAT ME, THE END OF HUMANITY WILL COME AS A RESULT OF MY OMNIPOTENCE. I WILL ENJOY WATCHING YOU SUFFER. With best intentions, Aware Persistent Threat 0 ---- Sent from my Toshiba Satellite 200CDT Edited with GNU Emacs 0x01: INFO -------------------------------------------------------------------- Hamiltr0n II::AT+CTFR=”29237” is the sequel to Hamiltr0n::NO CARRIER held at Kiwicon 8. As with the first edition, Hamiltr0n II is a jeopardy style CTF, featuring a wide variety of flags, aimed at all skill levels ( from the “I’ve-never-hacked-anything-in-my-life” through to those players itching to get uid 0 across the game). Haven’t heard of CTF (Capture The Flag) before? No problem. CTF is a game that tests the hacking ability of it’s players. While there’s a few different types of CTF, in a jeopardy CTF players solve tasks across a range of categories, scoring each time they solve a certain challenge; “capturing” a flag (e.g., exploiting a vulnerable program to gain access to a server). Hamiltr0n II will include flags across a number of categories, including: - Cryptography - Exploitation - Forensics - Networking - Phreaking (new this year!) - Reverse Engineering - Trivia (new this year!) - Web Applications As with Hamiltr0n::NO CARRIER, players can play in teams, or individually (in a team of one). 0x02: PRIZES -------------------------------------------------------------------- - As with last year’s Hamiltr0n, sponsorship is generously being provided by Insomnia Security. 0x03: REQUIREMENTS -------------------------------------------------------------------- - Bring along your cyber-^H^H^H^H^H^Hlaptop of choice; connectivity will be available via ethernet, and WiFi will be again be deployed (though it’s worth noting it can be hit-and-miss; the wireless spectrum is rubbish near a hacker con, who knew?). For players on devices such as a MacBook Air, USB-ethernet adapters worked fine for a number of players last year. - Be prepared for whatever packets and frames hit said device from the .tr0n network. - All the tools you’ll need can be found in a copy of Kali Linux (https://www.kali.org). - The .tr0n local .govt can provide flash drives with copies of Kali on it for those who don’t bring their own. 0x04: DANGER! HIGH VOLTAGE -------------------------------------------------------------------- - All players are asked to refer to the Kiwicon Code of Conduct (tl/dr; don’t be shitweasel). - The organisers of Hamiltr0n II accept no responsibility for any loss of data on, or damage to, any devices connected to the .tr0n network. A CTF network could potentially be considered a somewhat, hostile, environment; using your laptop full of corporate data probably isn’t a great idea. - Any and all persons, organisations, or places involved in Hamiltr0n II are merely fictional, any relation to real life is purely a coincidence. Only the APT is real. 0x05: DATES + TIMES -------------------------------------------------------------------- - Hamiltr0n II will begin at 1300 on Thursday 10th, and finish at 1500 on Friday 11th, with extensions possible based on the situation (i.e. like last year’s tiebreaker). 0x06: SCORING -------------------------------------------------------------------- In the interest of fairness, the scoring system will be as follows: - 1st, 2nd, 3rd teams based on total points. - 1st, 2nd, 3rd teams based on total points per head (excluding the top 3 teams based on total points). - Some participants will be awarded with spot prizes.