We congratulate all participants of RuCTF2008! The challenge is over. The winner is
"HackerDom" (
USU), the runner up is "Smoked Chicken" (
SUSU and
ChSU), third place goes to "Reboot" (
USATU). See
scoreboard for more details.
Sponsors:
НИП Информзащита (main sponsor),
Microsoft,
СКБ Контур,
LinuxCenter,
NAG.ru,
Компания АСК,
Компания Aladdin,
Компания 1С-Уральский центр,
Компания АСП,
ЗАО УралВЭС,
Екатеринбургский муниципальный банк,
Уральский Центр Систем Безопасности.
Challenge starts on the 26th april and ends on the 28th april 2008 in Ekaterinburg, Russia.
RuCTF is a team challenge in information security, its main aim is to evaluate capabilities of participants to protect computer systems and to carry out security audit. Challenge rules are based on international
CTF rules.
Capture the Flag is a game in which several teams compete with each other. Each team gets a server from jury with preinstalled vulnerable services. Servers are identical at the start of the game. Teams' tasks are to maintain services up and running, prevent intrusion attempts, carry out audits of other teams' servers. It is necessary for teams to find and patch vulnerabilities on their servers. At the same time, knowing some vulnerabilities, it is possible to do the audits of other teams. For maintaining services up and for submitting flags, found on other servers, team earns points.
During the game jury checks the functionality of services of each team, puts new flags and checks for previously put ones, tracks captured flags.
Points are given for:
- correct functionality of team's services;
- captured flags from other teams;
- disclosure of vulnerabilities in advisories;
- solving quests.
The main aim of RuCTF is communication and exchange of knowledge!
| Date | Time | Event |
| 25.04 | – | Checking in |
| 17.00 – 20.00 | ABC (EACP/Coding battle). More information at acm.usu.ru. (USU, Turgeneva 4, #151) (Optional) |
| 26.04 | 10.00 – 14.00 | Official opening. Conference (USU, Lenina 51, conference hall) |
| 14.00 – 15.00 | Lunch time |
| 15.00 – 17.00 | Methodical seminar on CTF (USU, Turgeneva 4, #151) |
| 17.00 – 18.30 | Informal communication |
| 27.04 | 08.00 – 12.00 | Teams get ready (USU, Turgeneva 4) |
| 12.00 – 20.00 | Challenge itself (USU, Turgeneva 4) |
| 28.04 | 10.00 – 14.00 | Game analysis, announcement of final results, awarding the best, informal communication (USU, Lenina 51, assembly hall) |
| 29.04 | – | Checking out |
Methodical seminar is for those who want to get more acquainted with CTF challenges, `security team' building, methods of training, game strategies, etc. A small demo game will be organized there.
| Who? | What? |
| Konstantin Plotnikov, Dmitri Kornev | Breaking da C.A.P.T.C.H.A. |
| Dmitry Simonov | VPN MITM |
| Nikolai Juravlev, Ilya Zelenchuk, Dmitry Simonov | SNMP security research |
| Olga Solomonova | Wardriving Wi-Fi |
| Marina Ilyenko, Valentina Kondrtyeva | Secutiry of Apache web server |
| Pavel Kruchinin, Evgeny Popov, Pavel Uvarov | Analysis of optimality of distribution of traffic in heterogeneous lans. |
Participating teams should be assiciated with some university. It is possible for one university to have several teams. Team may represent several universities. Only teams of up to 7 members may sign up.
Registration is over.
If you don't have a team, take part in RuCTF2008 as a guest.
You will be provided with a computer and access into game network with right to do everything that is not prohibited by the rules. Unfortunately, you cannot win any prizes. You will be able to make up a team with other guests. Game developers will consult you if necessary.
As an independent spectator you will be able to observe the work of jury team.