Blog

Code for binary services lecture posted

Code for the binary services lecture has been posted on Lecture Slides page.

A final reminder - this evening is the 4th and final lecture in the MIT/LL CTF seminar series, focusing on defense and monitoring techniques for Linux servers.  Given last year's experience, these concepts and tools will prove to be very useful.

Defending and Monitoring LAMP Servers - Wed, 7-9pm, 32-141

Please join us for the 4th (and final!) lecture in the MIT/LL seminar series.  This lecture will cover protection and monitoring mechanisms for Linux systems, including how to sandbox code, understand what processes are doing, monitor network connections, etc.  You'll need all this (and more!) to defend your server during the competition.  This lecture will be co-presented by Prof. Nickolai Zeldovich and your's truly.

In addition, we'll be making announcements about changes to scoring algorithm, CTF schedule and logistics, and a couple other things that you may be interested in.  So if you can make this seminar, please do!  Otherwise, we'll see you on Nov 3rd. 

Binary service lecture slides posted

Lecture slides for the binary service exploitation and patching seminar have been posted on the Lecture Slides page for those who could not make it in person.

Binary Service Reversing and Patching - Wed, 7-9pm, 32-141

The third in our seminar series will cover binary service reversing and patching.  We will present some advice on how to discover vulnerabilities, how to exploit these vulnerabilities and how to defend these services.

Prof. Wil Robertson (Northeastern University) and Joe Werther (MIT Lincoln Laboratory) will be co-presenting this seminar.

Web Application Vulnerabilities - Wed, 7-9pm, 32-141

The second in our seminar series will cover Web application basics (HTTP, Cookies, HTML, JavaScript, etc) and server-side web-related issues (SQL Injection, XSS, XSRF, etc).  We will present some advice on how to discover vulnerabilities in applications built on these technologies, how to exploit these vulnerabilities and how to defend web applications.

Prof. Engin Kirda (Northeastern University) and Joe Werther (MIT Lincoln Laboratory) will be co-presenting this seminar. 

VM information posted

CTF VM image is now available for download (in both VMX and OVA formats).  Instructions on how to get it and set things up are available at VM Information page.

Intro to MITLL CTF - Wed, 7-9pm, 32-141

Team registration is now officially closed.  We have 20+ teams playing in this CTF - head on over to Team Information page and check out your competition!  If you've requested to be put on a team and haven't heard from us yet, don't dispair - we're working our way through the survey responses and will make team assignments before the 1st CTF seminar on Wednesday.

Which brings me to the next topic - our first seminar introducing you to the 2012 MIT/LL CTF will be this Wednesday, 7-9pm at MIT Stata center (the funky building at 32 Vassar St, you can't miss it) in room 32-141.  This forum is the best opportunity to learn about game setup, scoring, logistics, etc and get your questions answered (we've allocated plenty of time for Q&A).

We will also have for you (barring any last minute technical glitches) a copy of the competition VM that you can take home and start exploring, fortifying, etc.  So if you'd like help getting setup, bring your laptop with VMWare installed.

Team registration deadline extended to Sunday

Due to popular demand, we extended the team registration deadline to 11:59pm EDT on Sunday, September 30.

Have a good weekend, and we'll see you at the first seminar on Wednesday, October 3 at 7pm!  For more details on the seminar series, see the Events Calendar (click on the event to get location and time details).  

We strongly encourage attendance, especially at the first lecture which will cover gameplay details for this CTF.  If you cannot make it, we certainly understand, so we plan to make slides available after the seminar.

RSS feed for this site

It is, despite my initial assessment, possible to get an RSS feed of updates for this site.

For blog updates, try this feed: Blog RSS Feed

For page updates, try this feed: Pages RSS Feed

Team information now available

You can now check out your future competitors (or collaborators!) at Team Information page.  The page also lists team captains' e-mail so that you can get in touch.

It's team-building time!

TL;DR:  Please do the following by Friday, 9/28 in order to participate in the 2012 MIT/LL CTF:
1.  Form teams of 4-5 players.
2.  Fill out survey at http://tinyurl.com/mitllctf2012survey. Note that the survey needs to be filled out by each team member.

Long version:

Welcome to the 2012 MIT/LL Capture the Flag competition!  We've got a great competition and seminar series prepared this year, and we're happy that you all are interested in participating.

Since our CTF involves more face time than most, we're limited by the amount of physical space that we have available.  This means that we have to limit team sizes to 4-5 people, since onsite presence is a requirement for this event (you don't have to make all the seminar events, but you have to be present for the competition itself).

Please do the following two things by Friday, 9/28:

1.  Form teams of 4-5 players (we can't accomodate more than 5, and we feel that fewer than 4 will put you at a disadvantage).
2.  Fill out the survey at http://tinyurl.com/mitllctf2012survey, which will ask for team information in addition to a few other questions.  This survey is meant to be filled out by each participant.

If you need help putting together a team or are looking for an additional team member, send us an e-mail at MITLLCTF-org@mit.edu (after filling out the survey), and we'll try to do some matchmaking.

Looking forward to meeting you all in person on October 3rd!

~ MIT/LL CTF Organizers

Registration closes Friday

Due to overwhelming response, we're closing the registration at 11:59pm on Friday, 9/21.  If you are interested in participating and haven't yet added yourself to the wait list, this is your final opportunity.

Registration Update

Wow - it's only Monday, and we're already over capacity.  Glad to see you guys are as excited about this event as we are!

If you didn't manage to snag a registration, don't despair just yet.  Please add yourself to the waitlist at the Registration site to express your interest; we are currently evaluating options for how to accomodate a larger participant pool.

Please stay tuned for updates.

Registration Opens Tomorrow!

Registration for the 2012 MIT/LL CTF is set to open tomorrow (Saturday, 9/15).  Please see Registration page for more information.  Space for this event is limited, so grab your spot soon!

Welcome to MITLL CTF!

Welcome to the MIT/LL CTF site!   

To learn more about the MIT/LL CTF, including qualifications, etc, see About MITLL CTF.  Registration information will be posted soon on "Registration Page".  Please mark your calendar for Events Calendar for upcoming events.

This site will update regularly, so check back for more details often.  If you have any questions and would like to get in touch with us, please see "Contact Us". 

Looking forward to meeting you in person at the seminars and the competition!