1 00:00:04,920 --> 00:00:15,940 Tom Van Dornen, I'm one of the co-founders of the ICS Village, and I'm going to talk to you today for a little bit about Hack the Planet CTF that went live about an hour and 15 minutes ago. 2 00:00:16,260 --> 00:00:25,320 So far we have a little over 100 people playing it, and I'm going to walk you through how to register, what's involved, things like that. 3 00:00:26,540 --> 00:00:31,900 So if you haven't done so, go to hacktheplanet.ctfd.io. 4 00:00:31,900 --> 00:00:38,880 Bringing to this screen here, go ahead and click here to register and play, ask you for some basic information, fill it out. 5 00:00:39,980 --> 00:00:44,660 Once you do that, you can come back and log back in. 6 00:00:44,660 --> 00:00:50,360 And the CTF is really made up of three different challenges this year. 7 00:00:50,580 --> 00:00:58,820 With the help of our sponsors and a lot of hard work from some volunteers, we have a Howdy Neighbor provided by Grimm. 8 00:00:58,820 --> 00:01:03,520 That's an IoT-based CTF. 9 00:01:03,520 --> 00:01:05,420 We have CISA. 10 00:01:05,900 --> 00:01:10,260 They have the Cellarskins.com out at INL. 11 00:01:10,260 --> 00:01:13,880 We have some challenges that you're going to go against them. 12 00:01:13,880 --> 00:01:23,840 But both of those environments, you're going to use a zero-tier network connection to get into, and you actually go against live real hardware. 13 00:01:23,840 --> 00:01:31,040 And then we have other questions that you can download PCAPs from or different artifacts. 14 00:01:31,240 --> 00:01:33,660 A lot of them were provided by Dragos. 15 00:01:33,660 --> 00:01:39,920 And you're going to download them locally, analyze the PCAPs, analyze the different files to answer your questions. 16 00:01:40,980 --> 00:01:48,160 Overall, we have about 190 questions that were provided. 17 00:01:48,180 --> 00:01:51,280 And we put in the CTF. 18 00:01:51,400 --> 00:01:53,560 We could not have done this without our sponsors. 19 00:01:53,560 --> 00:01:58,700 Some of the hard work was done by Don Weber from Cutaway Security. 20 00:01:59,140 --> 00:02:02,640 Dragos, CISA, Grimm, Scythe. 21 00:02:03,960 --> 00:02:05,580 I'm probably missing somebody in there. 22 00:02:05,580 --> 00:02:09,840 But a lot of people had a lot of really hard work to go in here. 23 00:02:10,020 --> 00:02:13,940 So click on those two links there, whatever one that you want to. 24 00:02:13,940 --> 00:02:21,780 And you're going to download or view, if you choose, instructions on how to connect to a zero-tier network. 25 00:02:21,780 --> 00:02:27,160 Instructions on how to play that section of the CTF. 26 00:02:29,830 --> 00:02:34,370 In addition to that, we have live camera feeds. 27 00:02:35,030 --> 00:02:39,430 You do not need to be a part of the CTF to view these. 28 00:02:39,630 --> 00:02:46,830 In the documents that you're going to read, where there's links previously, these links here will be in there. 29 00:02:46,830 --> 00:02:49,290 So we go between Twitch and YouTube. 30 00:02:50,350 --> 00:03:01,290 It's pretty cool to see when you answer some questions properly, you'll see some physical effects happen to the different skids or howdy neighbor. 31 00:03:03,330 --> 00:03:10,830 The CTF will run until 10 o'clock Eastern time tonight. 32 00:03:10,910 --> 00:03:16,090 And then they'll also run tomorrow and for a few hours on Sunday. 33 00:03:16,090 --> 00:03:19,850 Scoreboard will show who's in the lead. 34 00:03:20,350 --> 00:03:24,230 That can be viewed by anybody without an account. 35 00:03:28,290 --> 00:03:33,210 The winner this year, unfortunately, will not get a black badge. 36 00:03:33,210 --> 00:03:39,110 We got word just, I believe it was yesterday or day before, that winners will not get a black badge. 37 00:03:39,110 --> 00:03:40,990 However, you will have a lot of fun. 38 00:03:41,130 --> 00:03:44,650 It should take you all weekend to go through all of these challenges. 39 00:03:44,650 --> 00:03:47,890 Unless you already played this. 40 00:03:47,930 --> 00:03:53,130 We did debut a lot of this at RSAC a couple months ago. 41 00:03:53,530 --> 00:03:57,270 So you will see some challenges that were brought in from there. 42 00:03:57,270 --> 00:04:04,650 But it will take you probably all weekend to go through all of these challenges if you choose. 43 00:04:07,670 --> 00:04:17,510 If you have questions, and I'm sure you will, go to the contest and events, ICS Hack a Planet section on Discord. 44 00:04:18,250 --> 00:04:20,570 And just pop your questions in there. 45 00:04:20,570 --> 00:04:24,470 That should be open right now for everybody to do that. 46 00:04:24,930 --> 00:04:28,450 Somebody will get back to you with an answer. 47 00:04:28,450 --> 00:04:35,250 Either be in the general chat there where you posted it or a DM. 48 00:04:35,470 --> 00:04:38,810 But we will get back to you as soon as possible. 49 00:04:38,810 --> 00:04:47,770 Both the CESA skids and Howdy Neighbor zero tier connections all have a time limit to that. 50 00:04:47,770 --> 00:04:53,510 We had to impose a time limit just so we can let more people through. 51 00:04:54,150 --> 00:04:58,250 When your time is up, you automatically be disconnected. 52 00:04:58,250 --> 00:05:00,070 It's an automated feature. 53 00:05:00,390 --> 00:05:05,230 You can get right back in line and get back on it if there's not a wait. 54 00:05:06,770 --> 00:05:09,310 Reconnect pretty quick. 55 00:05:09,310 --> 00:05:12,530 If there are people in front of you, you're going to have to wait. 56 00:05:12,990 --> 00:05:21,810 One of the challenges that we have with this is we are dealing with real targets out there, real physical hardware. 57 00:05:22,270 --> 00:05:30,070 So the concurrency issue, in order to satisfy that, we have to limit people's time on it. 58 00:05:31,030 --> 00:05:32,850 So that's all I have. 59 00:05:32,850 --> 00:05:34,230 Good luck, everyone. 60 00:05:34,230 --> 00:05:37,590 If you have any questions, by all means, put them in the chat there. 61 00:05:38,450 --> 00:05:43,970 And I look forward to seeing the scores and seeing how everybody does.