Competations

• In this type of CTF a different platform will be provided where participants/teams have to register or login with predefined credentials separately and all the information will be sent to their registered email address.
• Participants/teams will be provided puzzles, programs with security vulnerabilities. There is a Secret key called ‘flag’ embedded with each of the puzzles. Finding the same is proof that participants have solved the particular challenge and by submitting the flag earns the points.
• Flags are chosen to look very distinctive and a special type of formatting that participants can easily recognize that it is the flag.
• Task will be categorised as Cryptographic challenge, Steganographic challenge, Web based, Reverse engineering, Networking, Forensics and others.
• Each problem statement has its own points which depends on the hardness of the problem.
• The marking procedure depends on how many points participants would have earned and how much time they have taken to submit the flags.

• The registered participants will be given remote VPN access to the OT-CTF platform. They have to log in to the system first as per the credential and specific time slot provided to them by the organisers.
• system will be a non hardened Industrial Control System (ICS) with the pre configured vulnerabilities.
• The task can be divided as– Participants have to discover the IP range of the OT Network, discover the devices connected to the network and its running protocols. Find the device or devices with vulnerabilities and exploit the system to gain access to the system.
• The infrastructure can be as complex as a real Industrial Control System used to have.
• A Proof of Concept report with proper screenshots needs to be sent with all the information like discovered IP range, connected devices, running protocols, and attack methodology to the organiser to the ctf@cyberpeace.net email id. Also mention the tools and if any script is used in the attack methodology.
• The marking procedure depends on discovered IP range, number of devices and protocols, number of compromised devices and also on the time taken to send the Proof of Concept report and its strength.
• CAUTION: The participants need to secure their attacking system first before entering the OT Network. As their System is suspected to be attacked by the other attackers. The organiser will not be responsible for any kind of damage.

Welcome back to the fourth edition of the Global CyberPeace Challenge! Gear up and get ready to take part in one of the largest simulations of the International cyber crisis. It will be your strategies and policies coupled with necessary trade-offs against the clock and wit of the other teams.

A simulated scenario will test the teams and players on their knowledge in foreign policy and cybersecurity and will then decide their worth as the next potential Leader of Cyber Security &Policy and the Winner of the competition.