Tactics and Rules 

Questions

All the questions regarding where the challenge start or if they are encountering issues, other technical difficulties, our staff will assist on the PUBLIC Slack Channel (#main-htz)

HTZ Staff is not responsible for

We are NOT responsible for any kind of issues that appears on attender/competitor personal belongings (PC, laptop, mobile, table or other devices), our staff will try to offer support, but cannot
guarantee that we can fix the issue since there are personal belongings

Each minute counts

Each minute counts! We have a race and only one winner! The attender that will score the best time on the last flag will be declared WINNER. If no one gets the last flag, the best time of the previous flag will be rewarded.

Be prepared for our challenges with your attacker mindset and the following prerequisites

You can do all the challenges by yourself or with your team, but only one person will get the prize!

We’ve placed our flags in multiple locations from Bucharest

os & software

Kali Distro

hardware

Laptop + power adapter

External Wireless Card

Mobile Phone

Personal HotSpot

USB STICK

Other

Probably some cash for personal expenses like a drink or small entry fees (50-60 RON)

Please read

Contest: HackTheZone RedTeam Challenge
Organizer: REDELITE INTERNAIONAL S.R.L, CUI40929939, J23/1565/04.05.2019

  1. Contest Entry

(1) Contest Entry is exclusively dedicated to participants of the HackTheZone annual conference which will take place on the 17th and 18th of October 2019 at the Crystal Pallace Ballrooms, Calea Rahovei 198A, District 5, Bucharest.
(2) The official website of the conference is Https://hackthezone.com
(3) Upon signing up, the participant will receive a pass which will have to be presented whenever the organizer requires it during any stages or sites of the competition.
(4) Should anyone under age of 18 want to participate, along with the pass received when signing up, they should present the written and signed agreement from their parent or legal tutor. The entry will take place in an individual manner.
(5) Access to the contest is open, and not limited, to people of any nationality, religion or sex.

  1. Contest timeline

(1) The contest will take place between 12th and 13th of October 2019
(2) The Contestants will manifest their intentions to take part in the contest by Submitting a written notification VIA e-mail to: concurs@hackthezone.com. The notification must contain the personal identification data and must be sent with 48h prior to the beginning of the contest. After submitting their written notification, the participants will receive an invite to a dedicated channel of the contest -Slack: https://hacthezone.com/slack where they will find the details of the first task, or VIA email.
(3) For a smooth contest surf, the contestants will need the following:

  1. a) A laptop + power cable.
  2. b) USB wireless adapter
  3. c) recommended budget for possible small purchases (refreshment drinks, food, possible fees that might occur i.e. parking entering a building etc.) -at least 60 RON
  4. d) recommended budget for shifting between locations in which the tasks will have to be performed 50 RON (transportation between sites will not be provided by the organizer and will be performed by individual means of the participant, whom will be solely responsible for any incidents that might occur during transportation between sites)
  5. e) Up to date Kali operating system – preinstalled or using a Virtual machine/VPS.
  6. f) mobile HotSpot.
  7. g) VPS (optional)
  1. The Contest development

(1) The tasks will take place online, however the tasks will require competitors to physically be within multiple location’s perimeter around Bucharest. The addresses will be discovered by the competitors during the different competition stages.
(2) On the 12th of October the details regarding the first task will be communicated to the competitors VIA the official Slack channel https://hackthezone.com/slack or VIA email.
(3) To further strengthen our unbiased position all support queries will be communicated VIA the main Slack channel and not in private to the organizer.
(4) The competitors will have to identify a flag within the systems put at their disposal by the organizer.
(5) The flag will have the form HTZ{SHA1} where SHA1 it’s a 40 long and random alpha-numerical array of characters.
(6) Successfully communicating the correct HTZ{SHA1} on the submission platform, will mean that the competitor has successfully completed the task.
(7) The competitor has the responsibility of submitting the flag on the submission platform.
(8) In the event that the competitor does not communicate the flag (at all or within the contest regulations) the task will not be considered as complete.
(9) The finish line of the tasks will be marked with a unique HTZ{SHA1} flag followed by the line “Felicitări ai finalizat concursul HackTheZone!””
(10) The ranking of the competitors will be established according to the timestamp of submitted HTZ{SHA1} flag on the submission platform. The first competitor to send the last HTZ{SHA1} will be declared the winner.
(11) If in the course of the competition the contestants are not able to obtain all the HTZ{SHA1} flag, the winner will be declared the competitor who sent the highest level HTZ{SHA1} flag, first.

  1. The prize

(1) The prize for every completed task will consist of 600 EURO (payable in Lei at the exchange rate published by BNR the day of the award ceremony)
(2) The value of the prize of which the winner can benefit will be directly impacted by the number of tasks completed within the competition (i.e.: If the contest will consist of 5 tasks, the grand prize will be 3000 Euros).
(3) According to local laws and regulations the prize will be subject to a 10% tax applicable by the source. (i.e.: if the total prize of 3000 Euros will be won, the winner will benefit of 2700 Euros)
(4) The delivery of the prize will happen VIA bank transfer. The winner must provide a bank account in his name for the organizer to transfer the prize to.
(5) The awards ceremony will take place during the second day of the conference, 18th of October.
(6) If the winner is not present at the ceremony, the prize will go to the next highest ranked competitor.

  1. Organizer’s obligations

(1) Making sure that all the necessary IT systems needed for the smooth running of the competition are available and functional.
(2) Answer the issues raised by competitors on the entire duration of the contest in the most open way, on the Slack public channel, without giving out the correct answers.

  1. Competitor’s obligations

(1) Have the ticket available to be presented at any stage of the competition should the organizer ask for it.
(2) Use a decent and respectful language within the contest and especially during the Social engineering stage (asking the right questions will lead to finding the solution).
(3) Use Open Source apps, and if apps which require licence are used, licensing will fall strictly under the competitor’s responsibility.
(4) Will not cause damage to any gear put at their disposal by the organizer or third-party associates.
(5) Will not execute DOS (Denial of Service) attacks to interfere with the functionality of the gear.
(6) Will not make use of the resources within the competition to generate cyber-attacks against systems that are not involved in the competition.
(7) Will not attempt to sabotage other competitors by any means.
(8) Will not force access in the competition’s locations outside working hours.
Not respecting the obligations mentioned above will lead to contest expulsion and event sanctions according to local laws

  1. Significant mentions

(1) The organizer reserves the right to modify the rules and regulations, notifying the participants beforehand.
(2) The organizer will not be responsible for possible injuries of the competitors while moving between locations.
(3) The organizer will not be responsible for possible illegal activities undertaken by participants within the competition’s timeframe.