Rules and Regulations

1.	There will be absolutely no toleration for DDOS attacks or attempts to crack and/or brute force the FTP server.
2.	Access to the FTP server is now open! Deadline for the submission of your results will be on Sunday May 8th, 2011 at 12:00 midnight.
3.	Like we mentioned before, there are no rules to recover the data, be as creative as you want.


Technical Guidelines


	There will be 10 technical issues to resolve gradually increasing in complexity.  Your goal will be to resolve all or as many as you are capable of doing in the shortest amount of time.

	Winners will be determined based on the amount of the technical challenges that they can resolve and the time-frame associated with it.

	There will be a 200 mb size jump drive image which you can download from the following address:
ftp://datanalyzers.exavault.com

o	Username: hacktacular
o	Password: y0ug0tit

	The jump drive image will have a FAT32 partition which has been corrupted.  It will be necessary to repair the partition, feel free to use software or manual editing techniques to resolve this issue.


Technical Challenges

1.	Repair the corruption on the FAT32 partition.

2.	In the root of the partition there will be a folder called “pictures”, within that folder there will be 3 picture files, one picture file will be corrupted and will not display properly, repair the damaged picture and copy all three pictures into a folder on your computer.

3.	An excel spreadsheet that existed in a folder called “Financials” has been deleted, recover the spreadsheet and store it on your computer.


4.	In a folder called “Secure” there will be a file called “note.rar” which has been password protected.  Break the protection and figure out the password and save the uncompressed file to your computer.

5.	In the root of the partition there will be a folder called “pictures 2”, within that folder there will be a .jpg picture file called ”HDD-manuf.jpg”. When looking closely you will see that the picture has been damaged and will not display properly. Do your best to repair the damaged picture and copy it into a folder on your computer.

6.	A Word Document named “SARS.doc” can be found in the root of the file system. Determine when the document has been created, edited and last accessed. Also determine who wrote the document and if anyone edited it.

7.	A Word Document named “FBi 1964.doc” can be found in the root of the file system. Determine when the document has been created, edited and last accessed. Further determine who wrote the document and if anyone edited it. In addition see if you can find out which version of Word has been used and also attempt to see if you can locate the MAC address of the computer used.


8.	Located in the vm folder you will find a Linux virtual image. There is a problem with the virtual image and it cannot be started. Repair the virtual image so that you can start the Linux system. You can download a VMware player for free from VMware to play the virtual image file.


9.	Once you can boot the virtual image start it and access the Linux distribution. You will perform a brief analysis on 2 files using the terminal

1.	/etc/hostname   find the last access date for this file, find out the host name that has been stored in it and locate the inode number associated with /etc/hostname file.
2.	/etc/passwd/ find the last access date for this file, find out the accounts that have access to this Linux system and locate the inode number associated with /etc/passwd file.



10.	In the root you will find a folder called “mp3”. Within that folder is an mp3     music file. Something is strange about that file, try and figure out it’s abnormality



Once you have completed all or as many of the tasks as you can, please write a very brief summary as to how you resolved the individual tasks. Compress the recovered pictures, spreadsheet, password and other gathered information and send it to Joannie@datanalyzers.com. Please use zip or rar for compression.

Thank you and good luck 