HackaDay 2019

Securing the chain of trust

20 June 2019

PwC's 3rd annual hacking competition for undergraduate students in Hong Kong

PwC Hong Kong's HackaDay is back for the third consecutive year! We are delighted to once again be hosting the 3rd Annual Capture the Flag competition. Registration is now open for undergraduate students in Hong Kong and Macau.

Everybody is talking about blockchain. It has the potential to powerfully disrupt many aspects of how businesses and economies work. Blockchain goes to the core of trust.

The question often asked is - is blockchain secure? Blockchain is, in itself, secure and the blockchain itself does not get hacked. However, it doesn't mean that the applications and data stores associated with blockchain themselves are tamper-proof. Hackers have found creative ways to cheat and subvert a blockchain application (e.g. breaking into 'hot wallets', reversing a cryptocurrency transaction, etc.). Billions worth of cryptocurrencies have been stolen as a result of hacks. 

For PwC's Hackaday 2019, we're going to look at securing blockchain applications. Participants will be assigned a Dark Lab Coin - a utility coin that functions as a virtual entry pass - that allows the participants to hack a blockchain application that is designed purposely and insecurely configured.

PwC’s HackaDay 2018 recap

loading-player

Playback of this video is not currently available

Why HackaDay?

HackaDay is PwC Hong Kong’s Capture the Flag cybersecurity competition designed for undergraduate students.  It is aimed at increasing the general awareness of the importance of cybersecurity among youths in Hong Kong and Macau. HackaDay also serves as a platform to raise the competency level of future talents to better prepare them for a meaningful career in cybersecurity.

 

Competition details

  • Date: 20 June 2019 (Thursday)
  • Time: 8:30am to 4pm
  • Venue: Cordis Hong Kong, 555 Shanghai Street, Mongkok, Kowloon, Hong Kong
  • Judging panel: PwC Hong Kong Cybersecurity and Privacy team

 

Who should participate?

Participants must be full-time undergraduate university students in Hong Kong and Macau at the time of registration (or undergraduate students within 3 months of official graduation)

 

Competition rules

  • Team format - each university can send a maximum of 2 teams, and each team must consist of a maximum of 4 members.
  • Teams are not permitted to collaborate during the competition.
  • The competition will test the skills and knowledge of teams under 4 hacking categories:
  1. Blockchain (NEW) - This challenge tests the participating teams’ understanding of blockchain technology, knowledge of interacting with a blockchain network, and the ability to identify and exploit common vulnerabilities in smart contracts.
  2. Network - This challenge tests the participating teams' skills and knowledge on network service discovery, vulnerability assessment and exploitation against common network protocols and infrastructure architecture.
  3. Web - The web challenge will test the participating teams' ability to analyse and exploit poor configuration and vulnerabilities in different web services and programme logic.
  4. Binary - The binary challenge seeks to test the participating teams' knowledge on binary analysis, analytical thought process and the ability to think out of the box.
  • Time limit: 6 hours
  • Participants must bring and use their own personal computer devices.
  • Detailed instructions on obtaining a Dark Lab Coin will be shared with participating teams after registration.

 

Competition scoring

  • 2-5 challenges per category
  • Difficulty level varies for each challenge, with scores ranging from 50-500
  • The winner will be determined by the team attaining the highest score
  • If two teams attain the same score, the team completing the challenge in the shortest time prevails

 

Agenda

8.30 - 9.00

Registration

9.00 - 9.30

Welcome remarks and briefing

9.30 - 15.30

Competition

15.30 - 16.00

Award presentation and group photo

* subject to change

Prizes

Winning team

1 year internship* OR direct entry to PwC Superday for final year students**
plus
full sponsorship of Offensive Security Certified Professional (OSCP) certification (30 day lab access)
 

Runner-up team

3 months internship* OR direct entry to PwC Superday for final year students**
plus
half sponsorship of Offensive Security Certified Professional (OSCP) certification (30 day lab access)

*with PwC Hong Kong and Mainland China's Cybersecurity & Privacy team
**for details of our internship and graduate programmes, please visit www.pwchk.com/campus

Please register through your respective university representatives listed below:


City University of Hong Kong
Mr Gerhard Hancke - gp.hancke@cityu.edu.hk

Hong Kong Baptist University
Mr Tam Hon Wah - tam@comp.hkbu.edu.hk

Hong Kong University of Science and Technology
Mr Chak Chiu Lee - ccleead@connect.ust.hk

The Chinese University of Hong Kong
Mr Xianbo Wang - xianbo@ie.cuhk.edu.hk

The Hong Kong Polytechnic University
Mr Allen Au - csallen@comp.polyu.edu.hk

The Open University of Hong Kong
Mr Steven Choy - sochoy@ouhk.edu.hk

The University of Hong Kong
Mr SM Yiu - smyiu@cs.hku.hk


City University of Hong Kong

Mr Gerhard Hancke - gp.hancke@cityu.edu.hk

 

Hong Kong Baptist University

Dr Tam Hon Wah - tam@comp.hkbu.edu.hk

 

Hong Kong University of Science and Technology

Mr Anthony Lai - lct@connect.ust.hk

 

The Chinese University of Hong Kong

Mr Shi Shangcheng - shishangcheng@gmail.com

 

The Hong Kong Polytechnic University

Mr Allen Au - csallen@comp.polyu.edu.hk


The University of Hong Kong

Ms Phoenix To - pto@cs.hku.hk

 

Please register through your respective university representatives listed as follows:

City University of Hong Kong

Mr Gerhard Hancke - gp.hancke@cityu.edu.hk

 

Hong Kong Baptist University

Dr Tam Hon Wah - tam@comp.hkbu.edu.hk

 

Hong Kong University of Science and Technology

Mr Anthony Lai - lct@connect.ust.hk

 

The Chinese University of Hong Kong

Mr Shi Shangcheng - shishangcheng@gmail.com

 

The Hong Kong Polytechnic University

Mr Allen Au - csallen@comp.polyu.edu.hk


The University of Hong Kong

Ms Phoenix To - pto@cs.hku.hk

 

Please register through your respective university representatives listed as follows:

City University of Hong Kong

Mr Gerhard Hancke - gp.hancke@cityu.edu.hk

 

Hong Kong Baptist University

Dr Tam Hon Wah - tam@comp.hkbu.edu.hk

 

Hong Kong University of Science and Technology

Mr Anthony Lai - lct@connect.ust.hk

 

The Chinese University of Hong Kong

Mr Shi Shangcheng - shishangcheng@gmail.com

 

The Hong Kong Polytechnic University

Mr Allen Au - csallen@comp.polyu.edu.hk


The University of Hong Kong

Ms Phoenix To - pto@cs.hku.hk

 

Please register through your respective university representatives listed as follows:

City University of Hong Kong

Mr Gerhard Hancke - gp.hancke@cityu.edu.hk

 

Hong Kong Baptist University

Dr Tam Hon Wah - tam@comp.hkbu.edu.hk

 

Hong Kong University of Science and Technology

Mr Anthony Lai - lct@connect.ust.hk

 

The Chinese University of Hong Kong

Mr Shi Shangcheng - shishangcheng@gmail.com

 

The Hong Kong Polytechnic University

Mr Allen Au - csallen@comp.polyu.edu.hk


The University of Hong Kong

Ms Phoenix To - pto@cs.hku.hk

 

Please register through your respective university representatives listed as follows:

City University of Hong Kong

Mr Gerhard Hancke - gp.hancke@cityu.edu.hk

 

Hong Kong Baptist University

Dr Tam Hon Wah - tam@comp.hkbu.edu.hk

 

Hong Kong University of Science and Technology

Mr Anthony Lai - lct@connect.ust.hk

 

The Chinese University of Hong Kong

Mr Shi Shangcheng - shishangcheng@gmail.com

 

The Hong Kong Polytechnic University

Mr Allen Au - csallen@comp.polyu.edu.hk


The University of Hong Kong

Ms Phoenix To - pto@cs.hku.hk

 

Please register through your respective university representatives listed as follows:

City University of Hong Kong

Mr Gerhard Hancke - gp.hancke@cityu.edu.hk

 

Hong Kong Baptist University

Dr Tam Hon Wah - tam@comp.hkbu.edu.hk

 

Hong Kong University of Science and Technology

Mr Anthony Lai - lct@connect.ust.hk

 

The Chinese University of Hong Kong

Mr Shi Shangcheng - shishangcheng@gmail.com

 

The Hong Kong Polytechnic University

Mr Allen Au - csallen@comp.polyu.edu.hk


The University of Hong Kong

Ms Phoenix To - pto@cs.hku.hk

About PwC’s Cybersecurity and Privacy team

With over 1,600 cyber professionals around the globe, PwC’s cyber security team helps its clients understand dynamic cyber challenges, adapt and respond to risks inherent to their business ecosystem, and prioritise and protect the most valuable assets fundamental to their business strategy. 

Visit our website for full details

Disclaimer

By participating in the PwC's HackaDay ("Competition"), you agree that, to the maximum extent permitted under applicable laws, PricewaterhouseCoopers Limited (“PwC”), other PwC firms and entities, their partners, employees, officers, agents, representatives and sub-contractors (collectively, “PwC Parties”) shall not be liable or responsible for, and shall be released from and held harmless against, all liabilities, claims, demands or actions of any kind, including but not limited for any death, accidents, injuries, losses and/or damages of any kind whatsoever to any persons and property which may arise or be sustained from or in connection with the Competition.

You acknowledge and agree that PwC Parties are not responsible for any technical, hardware, software, systems, networks, websites, platforms, servers and/or equipment malfunctions or failures, or any inaccurate, incomplete or incorrect information, or any other problems, errors, disruptions or interruptions of any kind whatsoever which may arise or occur in connection with the Competition.

You understand and agree that PwC Parties shall have absolute and sole discretion and right to conduct, organise, suspend, modify or terminate the Competition in any manner and at any time as they see fit.

You should, and should also ensure and procure that all your team members, comply with the Competition Rules and maintain the highest standard of professionalism, ethics and integrity during the Competition. As such, you and your team should not attempt or take any actions to sabotage, tamper or interfere with other competing teams, the Competition’s platforms or any PwC Parties’ hardware, software, systems, networks, websites, platforms, servers and/or equipment. You understand and agree that PwC Parties have absolute discretion to disqualify your team for any violation of the Competition Rules or ethics/integrity standards.

You agree that any disputes on or relating to the Competition shall be governed by the laws of Hong Kong, and the Hong Kong courts shall have exclusive jurisdiction over any disputes, whether contractual or non-contractual.

 

Follow us