HackTheGame Village is brought to DefCamp by OmniCYBR.
HackTheGame Village is a practical game security area where participants analyze and modify games that are made for security testing.
Participants can examine game files, analyze program code, inspect memory, modify game data, and analyze network communication.
The challenges can include:
- Reverse engineering
- Memory analysis and modification
- Game logic errors
- Client and server communication
- Save file analysis
- Network protocol analysis
- Game modification
- Anti-cheat systems
- Custom scripts and tools
Some challenges are for beginners. Other challenges require more technical knowledge. You do not need previous game hacking experience to participate.
The game says you cannot do it.
Prove it wrong.
Goal
Goal of the Competition
Your goal is to find and use weaknesses in the provided games and systems.
Each challenge contains one or more tasks.
Complete the task and get the flag.
During the competition, you can:
/Analyze game binaries.
/Inspect and modify memory.
/Change game values and game states.
/Find errors in game logic.
/Analyze network communication.
/Reverse engineer game functions.
/Create scripts and tools.
/Analyze anti-cheat functions.
/Find solutions that the challenge author did not expect.
Each completed challenge gives you points.
Get as many points as possible and climb the leaderboard.
Rules
Rules of Engagement
Use only the provided targets
/Only test games, programs, services, and systems that are part of HackTheGame Village.
/Do not test systems that are outside the competition scope.
Do not attack real games or external services
/Do not attack commercial games, public game servers, Steam, Epic Games, Discord, DefCamp systems, or other external services.
/These systems are not competition targets.
Do not attack other participants
/Do not access or modify another participant’s computer, account, challenge instance, network traffic, or data.
Do not attack the competition infrastructure
/Do not attack the scoreboard, challenge platform, network equipment, access points, administration systems, or hosting systems.
/If you find a security problem in the competition infrastructure, tell an organizer.
Do not perform Denial-of-Service attacks
/Do not intentionally stop, damage, or overload a shared service.
/A Denial-of-Service attack is permitted only when a challenge clearly requires it.
Game hacking tools are permitted
You can use:
/Debuggers
/Disassemblers
/Decompilers
/Memory editors
/Packet analyzers
/Scripts
/Mods
/Trainers
/Other security tools
/You can also make your own tools.
Creative solutions are permitted
/A challenge can have more than one valid solution.
/An unintended solution is valid if it stays inside the competition scope and does not break these rules.
/If you find an unusual solution, show it to the organizers.
Do not share flags
/You can discuss techniques and concepts with other participants.
/Do not give flags or complete challenge solutions to other participants during the competition.
Report infrastructure problems
/If you find a security problem that is not part of a challenge, stop testing it.
/Tell an organizer as soon as possible.
Respect participants and organizers
/Do not intentionally disrupt another participant.
/Harassment, abuse, or repeated violations of these rules can result in disqualification.
PRIZES
TBD
