Front Range OWASP Conference 2013/CTF - Revision history

Tyler Bell at 22:45, 28 March 2013

2013-03-28T22:45:59Z

Christopher Rossi at 17:44, 28 March 2013

2013-03-28T17:44:50Z

Christopher Rossi at 16:56, 28 March 2013

2013-03-28T16:56:27Z

Christopher Rossi at 16:04, 28 March 2013

2013-03-28T16:04:47Z

Karen Blakemore at 15:33, 28 March 2013

2013-03-28T15:33:20Z

Karen Blakemore: added hostnames

2013-03-27T04:38:17Z

added hostnames

Karen Blakemore at 00:52, 26 March 2013

2013-03-26T00:52:27Z

Andylew: /* Acceptable behavior */ added link to new wiki page for scoreboard so I can setup ctf.snowfroc.com to point to it.

2013-03-25T16:17:51Z

‎Acceptable behavior: added link to new wiki page for scoreboard so I can setup ctf.snowfroc.com to point to it.

Karen Blakemore: minor edits + installation and configuration information

2013-03-24T23:43:33Z

minor edits + installation and configuration information

Mark Major: Downplaying prize specifics

2013-03-21T02:05:57Z

Downplaying prize specifics

@@ Line 51: / Line 51: @@
 .50.65.12 training.theagency.owasp, theagency.owasp
 .56.65.87 theagency.owasp, Im.theagency.owasp
-.50.65.26 www.pla.owasp, secretlogin.pla.owasp, download.pla.owasp
+.50.65.26 www.pla.owasp, secretlogin.pla.owasp, download.pla.owasp, www.pla.pt
 .50.65.187 shadowcorp.owasp
 .19.147.198 ctf.snowfroc.com

@@ Line 58: / Line 58: @@
 * Load the .vmdk files
 * Make sure you are using a browser other than Internet Explorer which for security reasons is not supported by the scoreboard.
 ===Registration instructions===

@@ Line 53: / Line 53: @@
 .50.65.26 www.pla.owasp, secretlogin.pla.owasp, download.pla.owasp
 .50.65.187 shadowcorp.owasp
 * The first network adapter must be a bridge network adapter.
 *Configure the second network adapter to be a host-only network on your VM with IP address 10.50.65.254/24

@@ Line 53: / Line 53: @@
 .50.65.26 www.pla.owasp, secretlogin.pla.owasp, download.pla.owasp
 .50.65.187 shadowcorp.owasp
-* Configure a host-only network on your VM with IP address 10.50.65.254/24
+* The first network adapter must be a bridge network adapter.
 * Load the .vmdk files
 * Make sure you are using a browser other than Internet Explorer which for security reasons is not supported by the scoreboard.

@@ Line 49: / Line 49: @@
 <!-- How to install the competitor VM, including VM players, etc.. -->
 * Add the following entries to your hosts file:
-.50.65.12 training.theagency.owasp, admin.theagency.owasp
+.50.65.12 training.theagency.owasp, theagency.owasp
 .56.65.87 theagency.owasp, Im.theagency.owasp
 .50.65.26 www.pla.owasp, secretlogin.pla.owasp, download.pla.owasp

@@ Line 19: / Line 19: @@
 ===Acceptable behavior===
 Competitors are only permitted to attack targets running on their local systems. Network traffic will be monitored to ensure there will be:
-* No attacking the scoreboard. Misuse will result in punitive action.
+* No attacking the [[SnowFROC2013_CTF_Scoreboard| scoreboard]]. Misuse will result in punitive action.
 * No targeting the VM. Do not mount the VM and harvest flags from within.
 * No attacking other teams, whether through coercion, DoS, theft, sabotage, or other malicious activity.

@@ Line 14: / Line 14: @@
 All contestant machines should have:
-* A virtual machine player such as [http://www.vmware.com/products/player/ VMware Player], [https://www.virtualbox.org/wiki/Downloads VirtualBox], or [http://www.parallels.com/ Parallels].
+* A virtual machine player that supports .vmdk files, such as [http://www.vmware.com/products/player/ VMware Player], [https://www.virtualbox.org/wiki/Downloads VirtualBox], or [http://www.parallels.com/ Parallels].
 * Appropriate penetration testing tool ([http://www.backtrack-linux.org BackTrack], [http://samurai.inguardians.com/ SamuraiWTF], [[OWASP_Mantra_OS|Mantra OS]], and [[ZAP|OWASP ZAP]] will fit in well).
@@ Line 25: / Line 25: @@
 ===Prizes===
-Small prizes will be awarded to winners. Anyone who worked on the project or who has access project-related repositories are ineligible to win prizes.
+Small prizes will be awarded to winners. Anyone who worked on the project or who has access to project-related repositories is ineligible to win prizes.
 Both team and individual prizes will be awarded based on merit and other achievements.
@@ Line 46: / Line 46: @@
 This information will be released closer to the day of the event.
-===Installation instructions===
+===Installation and configuration instructions===
 <!-- How to install the competitor VM, including VM players, etc.. -->
-Coming soon.
+* Internet Explorer is not supported in the VM.
 ===Registration instructions===
@@ Line 56: / Line 60: @@
 ===Gameplay instructions===
 <!-- How to use the scoreboard; where to get help; etc. -->

@@ Line 25: / Line 25: @@
 ===Prizes===
-Small prizes will be awarded to winners. People Anyone who worked on the project or who has access project-related repositories are ineligible to win prizes.
+Small prizes will be awarded to winners. Anyone who worked on the project or who has access project-related repositories are ineligible to win prizes.
 Team prizes will be awarded to:
 * The team with the most points;
@@ Line 36: / Line 38: @@
 * The person who solved the most challenges (raw number);
 * The person who scored the most points (total sum);