IEEE Sri Lanka Section — Advancing Technology for Humanity

RED CYPHER 1.0

April 20, 2024 · 3:00 AM - 12:00 PM @ IS Department, Galle, Faculty of Engineering

Description

BACKGROUND 1.1 Introduction The Red Cypher CTF competition evolved as a means of developing cyber defender abilities in a dynamic digital background. Red Cypher was a three-workshop series that ended with a challenging competition that let participants demonstrate their knowledge, creativity, and endurance in defending against cyber-attacks. This study explores the beginnings and growth of the Red Cypher competition, including details on its goals, obstacles, and results. We hope to shed light on the significance of developing cybersecurity skills and strengthening defenses against new threats in our globalized society by examining the various aspects of this occurrence. 1.2 Event Objectives and Goals ● Raise awareness about the importance of cybersecurity and the potential risks associated with cyber threats among students and the wider community. ● Provide undergraduates with hands-on experience in cybersecurity through practical challenges designed to enhance their problem-solving and critical-thinking abilities. ● Encourage teamwork and collaboration among participants as they work together to solve complex challenges and share knowledge and expertise. ● Establish a vibrant community of cybersecurity enthusiasts at the University of Ruhuna, fostering networking opportunities and collaboration beyond the competition. 1.3 Process Summary The Red Cypher competition, organized by the CS Student Chapter of the IEEE Student Branch at the University of Ruhuna, aimed to promote cybersecurity awareness and skills development among students. This Capture The Flag (CTF) event featured teams facing off against a series of brain-bending challenges encompassing various cybersecurity domains, including reverse engineering software, decrypting messages, and exploiting web application vulnerabilities. To prepare participants for the competition, three engaging workshops were conducted, focusing on providing essential knowledge and skills to excel in cybersecurity challenges. These workshops served as dynamic platforms for participants to develop their problem-solving abilities and critical thinking skills in practical cybersecurity scenarios. The competition began with a dramatic video presentation by an anonymous hacker, who claimed to have hidden a nuclear weapon within the faculty premises. Teams were given a deadline of 5 hours to solve cybersecurity challenges and locate the nuclear weapon for defusal. Failure to find the nuclear weapon within the given time frame would result in the hacker's victory. As the competition progressed, teams embarked on a journey to different locations, including the hacker's office and the weapon location, each presenting unique challenges and clues to unravel. Teamwork and collaboration were essential as participants worked together to analyze data, exploit vulnerabilities, and decrypt messages. Upon solving the clues, teams proceeded to the designated location inside the faculty, where they faced the final challenge of neutralizing the threat. Utilizing their cybersecurity skills and knowledge gained from the preparatory workshops, participants worked collaboratively to analyze data, exploit vulnerabilities, and decrypt messages in each location. Ultimately, the Red Cypher competition served as a thrilling test of participants' cybersecurity expertise and teamwork. With the safety of the faculty at stake, teams rose to the challenge, showcasing their dedication and determination to thwart cyber threats and ensure the security of their university community. The Red Cypher opening ceremony commenced with an address from the organizers, highlighting the significance of the ultimate Capture The Flag (CTF) competition at the University of Ruhuna. However, the event took an unexpected turn when the screens flickered, revealing an anonymous speaker who identified himself as a CTF king. The speaker issued a challenge to participants, revealing that he had hidden a bioweapon that could only be neutralized using his biometrics. Participants were tasked with locating or generating the hacker's biometrics to disable the weapon. Throughout the process, competitors encountered challenges in the form of tasks aimed at gathering details about the hacker and generating his biometrics, setting the stage for an engaging and immersive CTF experience. Task 1: Cryptography Tasks Tasks 2: Web-Based Exploitation Tasks Task 3: Image Steganography Tasks Task 4: Network Attack and Defense on a Vulnerable Linux Machine Tasks Task 5: Audio Analysis Tasks Task 6: Hardware Challenge and Bomb Diffusion Task Sub task 1: Hidden Button Response Task Sub task 2: JavaScript Game Challenge Sub task 3: Metadata Analysis Sub task 4: Python Code Analysis Winners FB Page - https://www.facebook.com/ieeecsuor LinkedIn - https://lk.linkedin.com/company/ieeecs-uor Aftermovie - https://fb.watch/rGgb-rB5dS/?mibextid=Nif5oz Photo Album -https://www.facebook.com/media/set/?set=a.865588768914779&type=3 GALLERY REF Media produced the photography and video, which was then shared on the pages of the IEEE Computer Society Student Chapter, University of Ruhuna and Faculty Media Unit on Facebook. Album: https://www.facebook.com/media/set/?set=a.865588768914779&type=3

Agenda

Task 1: Cryptography Tasks Tasks 2: Web-Based Exploitation Tasks Task 3: Image Steganography Tasks Task 4: Network Attack and Defense on a Vulnerable Linux Machine Tasks Task 5: Audio Analysis Tasks Task 6: Hardware Challenge and Bomb Diffusion Task Sub task 1: Hidden Button Response Task Sub task 2: JavaScript Game Challenge Sub task 3: Metadata Analysis Sub task 4: Python Code Analysis

IEEE Sri Lanka Section