Today, immediately after my rules lecture to the 9:30AM (Central) information security class, the Spring 2010 iteration of Capture the Flag here at Mississippi State University will begin. While I have handed off much of the responsibility for running CTF to Chris Vance, our Security Lab Administrator, I will still be covering the event on this blog, much like I did last year.
The format is the same as last semester: 6 teams, trying to capture as many “flags” (10-digit hexadecimal strings. For example: 489066dd35) as possible. They submit these flags to a scoring server that also happens to be in the target network. There is always a very interesting meta-game between the teams, as they try to figure out how to submit their flags securely.
Last semester was the first CTF to run for multiple days, and I believe it was a huge success. We’re continuing this time format, and the current CTF will run until 9:30 AM on Tuesday. I will update this site with scores and a bit of commentary (though I won’t be spending as much time in the lab this time as I did last semester).
Here’s a list of posts from last semester’s CTF:

woohoo ctf!
Ah, it’s that time of year again. Note: 38e968c738 is totally not a valid flag. But the thing is, you have to try it, just in case…
Ahhh the memories! Good luck to all!