Fixme.ch:OldWiki/RwthCTF 2013

Information

• http://ctf.itsec.rwth-aachen.de/
• VPN configuration File:VPN.tgz

First Contact

Hey FIXME,

welcome to 0ldEur0pe-City - this year's rwthCTF special event.  We are
pleased to see that you take up the challenge of running a modern city with
all its electronic pleasantries and convenience gadgets. Is it really
possible to provide stable, reliable and secure software solutions for the
critical infrastructure of a whole city? It's your turn to prove all these
skeptics out there wrong!

Your city has been assigned the postal code 18 (your team id).

Attached, you will find your VPN certificate and config file that enable you
to connect your city to the world wide city network.

In order to be prepared for the real challenge, please download our test
image at

 https://gigamove.rz.rwth-aachen.de/d/id/3hNsQUEBJPB9vs
 (sha256: 84a054ef154e0bdc1e3de27aaac2c0ceccfedf4c1f09e01697235ae992e574b5)

alternatively, you may use the following torrent

 http://ctf.itsec.rwth-aachen.de/rwthctf2013prevuln.ova.torrent

and follow the instructions at

 http://ctf.itsec.rwth-aachen.de/vpn/

to test your VirtualBox and OpenVPN setup.

Please note that the Internet provider of your city decided some years ago
to be prepared for the future and upgraded all its systems to dual stack
mode of IPv4 and IPv6 in parallel.  Your citizens got used to the advantages
of this modern technology.  Thus, you should be able to provide a dual stack
setup for the game.  We want to indicate that this only requires an IPv4
Internet connection.  The IPv6 traffic to your city is tunneled via VPN.

Your city is assigned the networks
   10.22.18.0/24
and
   fd73:d95d:a475:120::/60.

All the central services of your city (your vulnbox) must be reachable at
10.22.18.1 and fd73:d95d:a475:120:1.

If your setup works, you should be able to ping our national authority
server (gameserver) at 10.23.0.1 / fd73:d95d:a475:1000::1 and we should be
able to ping your city's central services. Everything else (including the
scoreboard) is firewalled for now. Please remember that due to Service Level
Agreements (SLAs) IP traffic exchanged between the vulnbox and the VPN MUST
NOT BE FILTERED.

The final image of your city will be released for download soon in encrypted
form. You will receive another email in due time before the start of the
game. We will open the firewall and start pushing flags at 9th November
14:00 CET.  The decryption key for the city's image will be published a few
minutes earlier.

Feel free to ask questions in #rwthctf at irc.freenode.net.

In addition to your VPN credentials, you can catch a first glimpse of your
city attached to this mail.

See you on Saturday and make your city prosper,

The 0ldEur0pe-City team

350px