Buy Tickets
 
Back to Contests
Machines Hacked Politely

The Challenge

You’ve been given access to a web application belonging to a fictional organization. On the surface, it looks like a standard penetration testing target. Your objective is to go beyond the initial application and uncover what lies deeper within the environment.

The challenge is built as a progression of interconnected stages. Each successful compromise provides the access or information needed to continue, requiring you to continuously reassess what you have discovered and look for the next path forward.

How far you get is entirely up to you.

Scenario

You are conducting a penetration test against an organization with multiple applications and services exposed across its environment.

You start with limited access and very little information. As you investigate the environment, new functionality and attack surfaces will become available. Your job is to identify weaknesses, chain them together and progress toward the final objective.

The environment is designed to reward careful enumeration, creative exploitation and the ability to think beyond the system immediately in front of you.

No detailed attack path is provided. You will need to discover it yourself.

Previous Experience

Players should have experience with penetration testing, web application security, enumeration and common web exploitation techniques.

Knowledge of authentication, APIs, cloud environments, AI security and offensive security methodologies will be useful, but players are not expected to be experts in every area of the challenge.

Goal of the Competition

Start with the initial web application and work your way through the environment until you reach the final flag.

– Gain an initial foothold and establish a path deeper into the environment.
– Identify weaknesses across multiple layers of the target infrastructure.
– Escalate your level of access by chaining vulnerabilities together.
– Investigate newly discovered functionality and infrastructure to uncover hidden attack paths.
– Apply web exploitation, enumeration and cloud security techniques to progress through the challenge.
– Adapt your approach as the environment evolves and new information becomes available.
– Reach the deepest point of the environment and retrieve the final objective.
– Maximize your score by progressing as far as possible within the time limit while minimizing the use of hints.

Each stage is an opportunity to demonstrate a different part of your offensive security skill set.

Rules of Engagement

– Bring yourself and a laptop; everything else you need is provided at the stand.
– Shared Environment: All players in a round operate within the same competition instance. Participants must be aware that actions performed against the environment may affect the progress of other players.
– Final Objective: There is only one final flag. Retrieving it proves that you have successfully compromised the organization and completed the challenge.
– Hints may be available during the competition. Using a hint may reduce the points awarded for the relevant stage.
– Participants may use any tools, scripts and techniques they consider appropriate, provided they remain within the defined scope.

Scope & Restrictions

– The competition scope will be explicitly defined and communicated by the organizers before the start of the event.
– Participants must remain within the defined scope and may only interact with systems, applications, services and infrastructure belonging to their assigned environment.
– Denial of Service attacks, flooding, resource exhaustion or any activity intended to disrupt the competition environment are prohibited.
– Participants must not intentionally destroy, modify or hide flags or otherwise interfere with the intended operation of the challenge.
– Any unexpected vulnerabilities or unintended attack paths should be reported to the organizers.

Fair Play & Sportsmanship

The competition is intended to provide a realistic but controlled offensive security experience. Participants are expected to act responsibly, respect fellow competitors and follow the rules throughout the event.

Any form of cheating, sabotage, interference with other participants or deliberate disruption of the competition may result in immediate disqualification.

The organizers have final authority regarding the competition environment, scoring, scope and interpretation of the rules. Violations may result in penalties, disqualification or exclusion from future competitions.

Scoring

Scoring is based on three factors: successfully retrieving the final flag, the time required to retrieve it, and the number of hints used along the way. The final flag is the primary objective, with faster completion times and fewer hints resulting in a better score.

Final Objective

The challenge begins with a single web application and ends much deeper in the environment.

How you get there is up to you.

Find the weaknesses. Chain the access. Follow the path. Get the flag.

PRIZES

TBD

registration
SPONSORED BY

HACKING VILLAGE

Other Competitions

Machines Hacked Politely

Overview Back to Contests Machines Hacked Politely The Challenge You’ve been given access to a web ..
READ MORE ABOUT THE CONTEST

Lock Picking Village

Break a combination lock of beginner/average difficulty and get a lock picking set.
READ MORE ABOUT THE CONTEST

Target John

Target John is a competition where participants receive several details about a real target and they have to ..
READ MORE ABOUT THE CONTEST
Back to Hacking Village

Sponsors & Partners

They help us make this conference possible.

POWERED BY

Orange Business is a key division of Orange Romania, specializing in providing cutting-edge communication, technology, and digital transformation solutions tailored to businesses of all sizes. With a strong emphasis on innovation, Orange Business offers a wide array of services, including high-speed connectivity, cloud computing, cybersecurity, Internet of Things (IoT), and managed services. Their mission is to support organizations in their digital transformation journey by enhancing operational efficiency, improving customer experience, and maintaining a competitive edge in a rapidly changing digital environment.

Orange Business combines deep technological expertise with a customer-centric approach, ensuring that each solution is customized to meet the specific needs of their clients. Their commitment to innovation and excellence makes them a trusted partner for businesses seeking to thrive in the digital age.

PLATINUM PARTNER

GOLD PARTNERS

SILVER PARTNERS

BRONZE PARTNERS

HACKING VILLAGE PARTNERS

EXHIBITORS

VIP LOUNGE POWERED BY
ORGANIZER
INTERNATIONAL COMMUNITY PARTNERS
MEDIA PARTNERS
Become our partner