Welcome to CTF for Female Youth!
 |
 |
 |
About the challenges
The FIRST Challenge is a series of technical problems designed to provide a fun opportunity to utilize creative technical problem solving abilities to solve incident response inspired challenges.The challenges consists of a series of technical exercises where the participants must find an answer, a flag, and submit to the challenges platform. Every correct flag submitted increases an individual's score
Categories of challenges may include:
- network,
- cryptography,
- reverse engineering,
- programming,
- miscellaneous and others
An individual might create their own strategies to prioritize the tasks and explore the best of their knowledge
The primary purposes of the challenges are to challenge your knowledge, be familiar with CTF competition and environment, be creative, define strategies, and have fun.
Agenda
| Day | Time (UTC/GMT+7 Bangkok time) | Session |
|---|---|---|
| Wed. July 30 | 08:30 | Opening session on Zoom |
| Wed. July 30 | Challenge starts: 08:45 Challenge ends: 15:45 |
Participants can access the challenges and submit their answers until 15:45 Scorebard will be frozen at 15:45 |
| Wed. July 30 | 15:45 - 16:00 | Closing session on Zoom |
| Wed. July 30 until Sun. August 31 |
16:00 - 00:00 | CTF Platform stays open and flags can still be submitted. |
Who is creating the challenges?
This year's challenge is made possible with the generous support from the FIRST SecLounge SIG volunteers and: CERT.br |
 CERT-EU |
 CIRCL |
 CSIRT.FR |
 CSC.FI |
 Dataplane.org |
 DFN-CERT |
 DHS CISA |
 EC Cybersecurity Operations Centre |
 ENISA |
 MISP |
 New Anderton |
 SecDim |
 SWITCH |
 Team Europe |
 FIRST.org |
Collaboration and support
To facilitate collaboration a Mattermost platform is being provided. It offers an area for public information sharing among all participants. Support will be offered via Mattermost.
After completion of registration, a Mattermost account will be generated. Look for an e-mail from seclounge@firstseclounge.org which will contain login details and credentials for the Mattermost server. Should you encounter any issues accessing the platform, please contact Jessica or the organisers directly.
Registration
Individual registration is done directly through this website. To register, you will need the access code provided by FIRST.org as part of your registration for the CTF.
FIRST Challenge Details
Important annnouncements made during the challenge will be automatically pushed out in real time to all clients connected to the framework website on all pages of the website (with an audible alert). All previous notifications are published on the framework website under the "Notifications" page. Participants are encouraged to monitor this page for important announcements during the challenge.
Additionally, announcements may be made via the Mattermost platform. All participants are encouraged to monitor and participate in the public channel for relevant information related to the challenges.
Each challenge has a usual point value (100-500 points) that is awarded upon successful completion. There is no bonus or penalty for the order in which challenges are solved. Each participant will receive the same number of points for each solve.
Participant rankings are determined first by score and then by the order in which the latest challenge was solved (e.g.: in the event of a tie). If more than one participant has the same score, the rankings will be determined by the timestamp on the latest correct challenge submission. In this case, the participant with the oldest timestamp is ranked the highest.
Many challenges have hints available to assist in solving the challenge. Usage of a hint has an associated point cost. The hint cost will be deducted from the participant's score. In general, the higher the cost of the hint, the more helpful it is intended to be.
The FIRST Challenge will conclude on Wednesday, July 30th at 16:00 local time (UTC+7) and at that time, the participant with the most total points will be deemed the winner unless there is a tie, in which case the ranking displayed on the framework website utilizing the rules outlined above will be used to determine the winner.
Tips
- Pay close attention to answers to the challenges, especially regarding spaces and special characters.
- Challenges that are multi-part may not have some parts visible until the previous part is solved (the challenge part number is inidicated in the title).
- All challenges are designed to be solvable using standard free or open source tools. A standard Linux workstation or forensics focused VM (such as REMNUX or SIFT) should be sufficient.
- Any attempts at cheating, multiple registrations, brute force or malicious actions against the challenge framework and corresponding infrastructure will result in immediate exclusion from the challenge for the offending participant. The intent of the challenge is to engage in the competition, not to attack the system.
- The organisation team (SIG SecLounge) reserve the right to exclude any member engaged in an activity deemed inappropriate. Any dispute will be resolved by the SIG SecLounge members.