Competition Engagement

As questions arise in each location, CPTC team members will be in communication with each other through several means.  Volunteers playing various client characters have plans, information sheets, and open communications to ensure consistent answers and behavior across each of the regions and timeframes.

You will be responsible for providing a penetration test of the scope identified and provided to you.  This scope may consist of a number of machines on different subnets, depending on what access is authorized by the client during the competition. 

Access to the competition network is available through a Virtual Desktop environment that will be provided during the competition.  No other access will be permitted. 

For further questions surrounding access please see VDI Environment.

If you discover a subnet, host, target, or system that has a public IP address (one not included in the RFC 1918 scope) you should reach out to the client to discuss.  In general, public IP addresses will not be in scope for the test, beyond OSINT and discovery, and should not be the target of testing. 

CPTC creates private networks for the testing and competition to occur, attacks and techniques run

Absolutely not, this is provided for potential, past, and current competitors to answer common questions that we receive on a regular basis.  Any attempts against this environment, hosted by one of our third party sponsors, will result in immediate expulsion from CPTC for this and future years, and may result in civil penalties as this hosting provider is not involved in the competition.