Standoff 11
Cyber exercise
finished
Results

MetalliKO

Tube

Atomic Energy

Electric power industry

Logistics

Banking system

Urban infrastructure
MetalliKO iron and steel works
The factory has an onsite ore-blending plant with a bucket-wheel excavator and conveyor, a blast furnace, an oxygen-converter section, a rolling mill, and a continuous casting machine. Rolled metal is transported to customers from the finished product storage area
Scope
Outer perimeter:
10.119.11.64/26
Inner perimeter:
10.149.10.0/23
10.119.11.64/26
Inner perimeter:
10.149.10.0/23
Out of scope:
- all servers named logc.<office>.stf
- network 10.119.1.0/24
- SC SERVERS, SC USERS networks: 10.149.2.0/26, 10.149.4.0/26, 10.149.6.0/26, 10.149.8.0/26, 10.149.10.0/26, 10.149.12.0/26, 10.149.14.0/26, 10.149.16.0/26, 10.149.18.0/26, 10.149.20.0/26, 10.149.22.0/26, 10.149.24.0/26
- Accounts starting with "pt*"
Vulnerability reports
The tasks indicate where the vulnerabilities are located: on Gate hosts or in the DMZ and further within the infrastructure. Reports on vulnerabilities found in Gate are automatically verified upon flag submission. Reports on vulnerabilities found in the DMZ and within the infrastructure are verified by the jury.
When reporting a vulnerability, make sure to note where it was found. If it was discovered on Gate hosts, open the report in the relevant tab, select the vulnerability, and submit the flag. If it was found in the DMZ and further within the infrastructure, fill out a report for the jury.
Attacker metrics
Critical events
51reports
submitted
submitted
37critical events
triggered
triggered
Loading data
Difficulty:
Low
Medium
High
Master
Vulnerabilities
0vulnerabilities
discovered
discovered
Severity:
Critical: undefined
High: undefined
Medium: undefined
Low: undefined
Defender metrics
0
incidents
recorded
recorded
0
critical events
investigated
investigated
Results
Rank
Team
Triggered events
Event points
Discovered vulnerabilities
Vulnerability points
Total points
1

True0xA3
7
42,225
3
450
42,675
2

Codeby
7
28,475
1
150
28,625
3

5HM3L
4
13,698
5
650
14,348
4

ДРТ & ℭ𝔲𝔩𝔱
4
3,993
2
225
4,218
5

DeteAct × SPbCTF
4
3,687
4
375
4,062
6

APTeam
3
1,875
0
0
1,875
7

TSARKA
2
1,714
1
150
1,864
8

Invuls
2
1,062
1
150
1,212
9

Wetox
0
0
4
550
550
10

Инфосистемы Джет
1
419
1
100
519
11

Bulba Hackers
0
0
3
400
400
12

Baguette2Pain
1
293
0
0
293
13

NOMADS
0
0
2
250
250
14

r3kapig
0
0
2
250
250
15

Wardagen
0
0
2
250
250
16

ActivateWindows
0
0
1
150
150