Thank you all that participated in the 2020 December Metasploit community CTF! The four day CTF was well received by the community, with 874 teams and 1903 users registered! We’ve included the high-level stats and the competition winners below. If you played the CTF and want to let the Metasploit team know which challenges you found exhilarating, interesting, or infuriating (in a good way, of course), we have a feedback survey up here:
https://forms.gle/Vha8cFsu11mojSrZ8
Congratulations to everyone who teamed up with community members, learned something new, or captured flags. The collaboration we saw on Slack and Twitter was awesome as always!
Winners
| Place | Team | |
|---|---|---|
| 1 | Neutrino_Cannon | |
| 2 | PrettyBeefy | |
| 3 | PostalTime | |
| 4 | binbash | |
| 5 | deadastronauts | |
| 6 | EvilBunnyWrote | |
| 7 | L1T | |
| 8 | Mailru | |
| 9 | () { :;}; echo vulnerable | |
| 10 | Team sorceror | |
| 11 | ADACTF | |
| 12 | BisonSquad | |
| 13 | socialdistancing | |
| 14 | LeukeTeamNaam | |
| 15 | OWASP Moncton |
We'll be in touch with winners shortly to arrange prize delivery. Big thanks to CTFd for providing technology that helped power the game, and thanks to our friends at Hack The Box for chipping in cool prizes!
Thanks to everyone that took part in this year's CTF. All teams who made it onto the scoreboard will also have their team names incorporated into a commemorative banner in Metasploit Framework in the new year.
Stats!
- This year had 2000 total possible points from our 20 challenges. Two of these challenges were previously unsolved challenges from our January 2020 Metasploit Community CTF.
- Overall there were 1903 users and 874 teams registered
- Over 1400 machines were deployed over the course of the game
- 24 teams managed to capture all flags
- The 4 of Hearts had the most solves with 407 solves, and the 7 of Spades had the least solves with 33 solves
- 413 teams made it onto the scoreboard. Congrats to all of you who captured your first-ever flag in this year's game!
- 2275 correct MD5 hashes were submitted, with 1229 wrong submissions.
| 4 of Hearts | 407 |
|---|---|
| Red Joker | 213 |
| 8 of Hearts | 183 |
| 2 of Spades | 176 |
| 6 of Diamonds | 157 |
| 3 of Spades | 137 |
| 6 of Hearts | 122 |
| Black Joker | 111 |
| Queen of Hearts | 90 |
| 2 of Hearts | 87 |
| 8 of Diamonds | 84 |
| Ace of Clubs | 77 |
| Queen of Spades | 75 |
| 4 of Clubs | 71 |
| 9 of Diamonds | 65 |
| 9 of Clubs | 60 |
| 8 of Spades | 49 |
| 5 of Clubs | 39 |
| 9 of Hearts | 39 |
| 7 of Spades | 33 |
As in previous years, it's possible that the hacker community will come out with detailed write-ups on how they solved some or all of this year's challenges. We'll do our best to list a few of those here as they roll in. You can also check out #metasploit-ctf and #write-up-links in Slack for solution discussions.
Thanks to everyone who made the competition a fun and educational experience, both the community and everyone that was involved in the creation of the CTF and its challenges: zeroSteiner, space, tychos_moose, catc0n, juggernot, n00tmeg, erinbleiweiss, pebarry, Dean, Op3n4m3, hairy_mongrel, 8_bitChris, tekwizz123 and Alan Foster. We look forward to seeing you at the next Metasploit CTF!