LAST FIRST BLOOD!
RadioWave by #misec
Congratulations!

It's time to release something. It's 10th RuCTFE, so we have cartoon for our anniversary
https://youtu.be/1NwStwgeuy0
Take a little break and enjoy it :)

RuCTFE 2018 is over!
First place: saarsec
Second place: Bushwhackers
Third place: TowerOfHanoi
Thank you for a good game!
Please, leave us feedback: https://goo.gl/forms/A4LzVmxsGQQf1X9N2
With ❤️ Hackerdom team

Also please vote for us at CTFTime: https://ctftime.org/event/687/weight/

Some interesting pics from our admin BAY!

Internal trafic stats: https://alexbers.com/ructfe2018_trafstat.png

Stats of most active teams: https://alexbers.com/ructfe2018_trafstat2.png

Write-ups: bit.ly/1FQbMVt

We need to say thanks to our RuCTFE.org/devteam, our sponsor kontur.ru, infrastructure partner yandex.ru and really big thanks and love to you, dear participants! It was 10th RuCTFE (btw, have you seen our cartoon? https://www.youtube.com/watch?v=1NwStwgeuy0) and it was great RuCTFE because of you!

We have answers for a few frequent questions:
Write-ups will be availiable soon, less than in 6 months :D
We've already sent results to CTFTime.
We'll contact winners to send prizes really soon (really!) and will send invitations to RuCTF in a few month, when we'll have more information about RuCTF 2019. Now we know only three things: we'll make it, we'll make it in April, we'll make it in Yekaterinburg! We wish to see you there as participant or guest ❤️

P.S.: just a reminder, please leave feedback:
https://goo.gl/forms/A4LzVmxsGQQf1X9N2

Hey, FAUST team, thanks for write-up!
https://weblog.christoph-egger.org/RuCTFe_2018_laberator.html
Btw, results are published on CTFTime, pls vote for our weight: https://ctftime.org/event/687/

RuCTF 2019 is going to take place in Yekaterinburg on April 26-29. RuCTF is an annual open intercollegiate competition and conference on information security. This year we are holding the contest for the 13th time!

https://youtu.be/5vQiMn8dd94

The schedule will be the following:
April 26-27 — opening, the conference itself and a personal contest on information security,
April 28 — Attack/Defence CTF,
April 29 — awarding and closing ceremony.
We have already sent all the invitations to the teams and very soon the list of invited teams will be made public. The conference program will be published and spectators registration will be opened a little later. If you would like to give a talk at the conference, please let us know via DM @ktwzk, email info@ructf.org or DM on https://twitter.com/ructf


Feel free to ask any questions via our email info@ructf.org or https://news.1rj.ru/str/ktwzk or DM on https://twitter.com/ructf

In 2017 we had invited you to rule your own boat. So now it's time to go deeper! How about a submarine? The 23rd of November, 10:00UTC, Ocean of the Internet, VPN Sea
https://youtu.be/NNzA5twf3n4

Don't forget to register your warship! Registration is open now at https://RuCTFE.org/registration

Time to remind you of a couple of important things!
This year we again have RuCTFE Cloud, here is a short FAQ about it: https://ructfe.org/cloud-faq/
It is really good way for novice teams to start rocking at attack/defence. Pros can also use it, because it’s handy!

And tomorrow will begin @ZeroNights 2019!
ZeroNights is an annual international conference devoted to the practical aspects of cybersecurity. The aim of the conference is to spread information about new attack methods and defenses, as well as to create space for communication.

BAY, our Cloud creator and admin, can’t go to ZN this year, but he said, that the program is cool, most of all he likes "Principles in software testing and some bugs that others did not notice", "A Monkey in the Sandbox: Exploiting Firefox Through IonMonkey JIT and Kernel Sandbox Escapes", "Opwnsource: VNC vulnerability research".
So if you’re in Saint Petersburg, come and buy tickets right now (or tomorrow at A2 club)! Also you can buy tickets to St. Petersburg first, but you need to hurry up 🙂
https://zeronights.ru/

Hey, RuCTFE will start at this Saturday! We've updated router and test images and sent to PoC of teams credentials for VPN, checksystem and RuCTFE Cloud access, please check your email (also check "Spam" folder!). If you haven't received the letter, you can request it again.

This year we have two huge changes in rules and network behavior:
1. Now you will have access only to HTTP flag submission systems. Here is an example of HTTP-version usage. Yep, no TCP at 31337 port since this year.
2. We've shuffled your IDs. Not accidentally, it's our choice. Now your ID for the game is not placed on Teams page, you'll get it with your configs.

And one small change: we’re moving from IRC to Slack.

Some important instructions!
If you plan to run vulnbox on your own server: download Router and TestImage and follow the instructions.
If you plan to play from Cloud: just chill, Cloud will be opened with the game start (you'll have enough time to prepare VM).
If you do/don't like changes: turn and face the strange changes and send your feedback to us 🙂

This year we’ve shuffled teams’ IDs and will not show IPs on scoreboard. It’ll makes game harder for pros and changes nothing for newbies. Teams' IDs are pre-shuffled from 1 to 699 and we have full mapping, that will be shared after end of the game. During the game it's only up to teams to share or not share their ID/IP.

Question from WE_0WN_Y0U team: So since the IDs are randomized, can we somehow query which IDs are actually online/assigned? Cause otherwise we'd have to scan the net/attack the full range of possible IPs?
Answer: Yes, we’ll post the list of registered IPs right after registration closing on Slack, Telegram and on RuCTFE.org.

While devs are having last preparations, we've collected some questions from you. Here is the answers.

Q: If my team plays self-hosted, what's system requirements?
A: Nothing special, 2 CPUs, 4GB RAM, 30GB HDD will be okay. Remember to install VirtualBox 6.0.14!

Q: Remind me, how long game round and flag lifetime is?
A: One round takes nearly 1 minute, flag is actual for 15 rounds.

Q: So, what's the timeline?
A: Get image password or access to Cloud at 10:00UTC, prepare for network opening at 11:00UTC, attack and defence for 8 hours. Celebrate winning at 19:00UTC!

VULNIMAGE IS HERE!
https://ructfe.org/news/#vulnimage

(image will download faster if you’ll use torrent)