PRO CTF is an onsite international challenge in information security. Developed by Hackerdom team for HITB CyberWeek in Abu Dhabi, UAE. PRO CTF 2021 was held on November 24–25, 2021.
The contest is driven by almost classic rules for Attack-Defense CTF. Each team is given a set of vulnerable services. Organizers regularly fill services with private information — the flags. The goal of each team is to find vulnerabilities, fix them in their services and exploit them to get flags from other teams.
This year we've prepared special version of the rules and scoring system which can be used in our next competitions: https://docs.google.com/document/d/1uU9f38UpxdsMeuAsM5TAnp_i4T-DhM-Ur9JOxUeTc8M/edit
This repository contains:
- source of all services in folder services/
- checkers for checksystem in folder checkers/
- exploits for all services in folder sploits/
- writeups with vulnerabilities and exploitation description for all services in folder writeups/
- source code for the jury side's service in folder jury_services/.
Also, we bring to you some of our internal infrastructure magic:
- CI for Digital Ocean's images services' packing. See vuln_images/.
- our CTF Cloud Infrastructure in ansible/roles/cloud_master.
- on-site router configuration in router/ — it's really simple this year.
Final scoreboard:
| SERVICE | TEAM |
|---|---|
| fs | Bushwhackers |
| chess | mhackeroni |
| p0ck37 | Bushwhackers |
| forvolution | RedRocket |
| timecapsule | organizers |
| genealogy | C4T BuT S4D |
| cells | perfect blue |
| authme | Nupakachi |
| caas | C4T BuT S4D |
| hsm | Bushwhackers |
| mp | More Smoked Leet Chicken |
This CTF is brought to you by these amazing guys:
- Alexander Bersenev aka
bay, the author of serviceschessandauthme, also our cloud and VPN master - Andrew Gein aka
andgein, the author of the servicegenealogyand support for teams - Andrey Khozov aka
and, the author of the servicecaas, also our checksystem master - Artem Zinenko aka
art, the author of the servicep0ck37 - Artur Khanov aka
awengar, the author of the servicecells - Bulat Zaynullin aka
tinkturianec, the author of the serviceforvolution - Dmitry Simonov aka
dimmo, the author of the servicehsm, also our on-site network master - Dmitry Titarenko aka
dscheg, the author of the servicetimecapsule, and our techleader - Konstantin Plotnikov aka
kost, the author of servicesfsandmp, and our teamleader
If you have any question about services write us an email to [email protected].
© 2021 HackerDom