SCSU Cyber Competition Club

The Practice Range

Deliberately broken machines, running on the club network in Centennial Hall. Break in, find the flag, bring it back here.

Open the board Scoreboard

How it works

  1. Get on the lab network

    The targets live on the club LAN in CH20. You have to be in the lab to reach them; they are not on the internet, and that is deliberate.

  2. Pick a target

    Every challenge names the address it lives at. If an address is not written on a challenge, it is not part of the range.

  3. Find the flag

    A string shaped like ccc{…}, sitting somewhere the machine really should not have left it.

  4. Submit it here

    This scoreboard never touches the lab. It only compares strings, which is why the targets can stay safely off the internet while the board does not have to. 

you@lab:~$ curl -s http://10.10.0.50/.git/config
[core]
        repositoryformatversion = 0
# well, that should not be readable

you@lab:~$ git-dumper http://10.10.0.50/.git loot/ && grep -r ccc{ loot/
loot/config/secrets.yml:  token: ccc{d0nt_c0mm1t_y0ur_s3cr3ts}


# paste that into the flag box. that is the whole game.

Scope

Fair game

  • The addresses named on a challenge
  • Anything you can reach from a box you have already taken

Not fair game

  • Anything else on the university network
  • Other people's machines, including other players
  • Anything on the internet
  • This scoreboard

The line is not a formality. Everything on the range is ours and consented to; nothing outside it is, and the difference between a student and a defendant is in exactly that distinction. If you are unsure whether something is in scope, ask an officer before you touch it.

Getting an account

Registration needs a join code, which officers hand out in person. Come to any meeting: Tuesday, Wednesday or Thursday at 5:00 PM, CH20 Centennial Hall. Bring a laptop if you want to follow along, or don't and watch over someone's shoulder.

scsucyber.dev Discord