SANS Kringlecon 2022 Introduction

What Challenges Should You Expect?

 

This year, the infamously precious 5 Golden Rings have been stolen, and Santa needs your help to recover them. Each ring represents a different quest to defeat cybersecurity obstacles to change the course of the future and defeat holiday treachery:

 

1. Tolkien Ring (Network Security) - Analyse a PCAP to identify malware, and then analyse logs and create IDS rules to detect such attacks.

2. Elfen Ring (SecDevOps and Supply Chain Attacks) – Identify malicious packages and then attack CI/CD processes to escape a container.

3. Web Ring (Web Application Vulnerabilities and Exploitation) - Identify XML External Entity (XXE) attack and leverage such vulnerabilities to gain access.

4. Cloud Ring (Cloud Security) - Analyse cloud configurations via the command line, identifying possible vulnerabilities and information leakage.

5. Burning Ring of Fire (Cryptocurrency, NFT, and Smart Contract Attacks) - Acquire and spend cryptocurrency, then analyse a smart contract and blockchain to undermine the cyber villain’s plot.

Also with Hidden chests all around the game sprinkling elven hints & references

 

CTF Portal: https://2022.kringlecon.com/

 

More Information can be obtained from the following Links

·      Ed’s intro video - YouTube

·      SANS Challenge Details - Link

·      SANS Official Support Channel: discord invite

following are the links to each challenge walkthrough

Tolkien Ring 

Wireshark Practice

Windows Event logs

Suricata Regatta

Elf Ring

Clone with a difference

Prison escape

Jolly CI/CD

Web Ring

Boria PCAP Mining

Open Boria Mine door

Glamtariels fountain

Cloud Ring

aws-cli-intro

Trufflehog search

Exploitation via aws cli

NFT

buy-a-hat

Blockchain Divination

Exploit a smart contract

 

Kringlecoin Orientation

Upon Successful sign up with your account to Kringlecon, Beginning of the game our avatar stands right next to the Jingle Ringford waiting to talk and a KTM machine with logo indicating create a wallet

We get introduced to five ring badges on our avatar and then left hand side navigation pane. Next, we are asked to click on the KTM machine to create a wallet, greeting us with the following msg and give us a Kringlecoin wallet address and key to access & authorise transaction from the wallet

After which we are asked to click on a new terminal icon popped up next to Jingle Ringford, where we are presented with “Enter the answer here” prompt teaching us to use the terminal windows for future challenges.

Once you have typed “answer” on the above panel the we receive out intial kringlecoins and the gate next to Jingle Ringford unlocks. A new narrative gets unlocked as we progress and we are being asked to talk to Santa

After speaking to Santa he briefs us on his situation of how he lost his five magical rings and unlocks access to first few challenges in the quest to retrieve the five rings (Tolkien Ring, Elfen Ring, Web Ring, Cloud Ring and Burning Ring of Fire)

And there begins your quest to save Santa !,