Sidebar
This is an old revision of the document!
Table of Contents
Cyber Conquest @ DakotaCon 10.1
A purple team (offensive and defensive) cybersecurity competition that I designed, planned and lead a team to build.
Start: 2023/01
Competition Date: 2023/03/25
Materials
- Python
Overview
Cyber Conquest is a purple-team cybersecurity competition (that is, it combines both offensive and defensive skillsets) into one king-of-the-hill contest. Teams are tasked with defending their own infrastructure while attacking other team’s infrastructure to gain points. Defensive points are gained by keeping your services up and keeping other teams off your systems, and offensive points are gained by planting your flag on opponent’s systems. - Computer Club Wiki / Cyber Conquest website
For this year's competition I went with a city theme. Each network had a network with 8 systems on it.
| System Name | Operating System | Type | Scored Services | IP |
|---|---|---|---|---|
| Krypton | pfSense | Virtual | firewall | 192.168.0.1 |
| Atlantis | Windows Server 2012 | Laptop | Water Tower | 192.168.0.11 |
| ArkhamAsylum | Windows Server 2012 | Virtual | DNS / Domain Controller | 192.168.0.15 |
| Starlabs | Raspbian 1) | Raspberry PI | Wind Turbine | 192.168.0.22 |
| LexCorp | Fedora | Virtual | ssh, Web, DB | 192.168.0.25 |
| Metropolis | Ubuntu 18.04 | Laptop | Traffic Light | 192.168.0.33 |
| TheHiddenCity | Windows 10 | Virtual | Client | DHCP |
| HallOfJustice | Kali | Virtual | Hax | DHCP |
A few of the systems were on physical laptops that teams were given. These physical systems were controlling actual ICS like systems.
Atlantis
Atlantis was a Windows Server 2012 system which was plugged into a MCP2221 and controlled a mock water tower. The water tower had a small fountain pump pushing water into a cup. It would fill up to a water sensor and then turn off in 1 second cycles. This caused the water level to oscillate up and down but never overflow or empty.
- FT232H GPIO Breakout
Metropolis
Metropolis was an Ubuntu 18.04 Server system that we loaded a desktop environment onto. It used a FT232H to control 2 neopixel strips to act like a traffic light. I wrote a python/flask based webapp that allowed setting individual pixels as well as changing the 'microcode' that it was running which scheduled when and how the lights blink.
- MCP2221 GPIO Breakout
STAR Labs
STAR Labs was a raspberry pi 3 with a motor controller hat. We were donated a large amount of old pump motors which I repurposed to spin a 3dprinted windmill blade. 2)
