HackQuest 3.

0 Round 1
Instructions

TATA Consultancy Services Ltd.

Cyber Security Practice
Version 1.0

Dear Participant,
As you gear up for the HackQuest Round 1 of the contest, please follow the below points in order to optimize
time and have a smooth start.

An online web application URL will be shared via campuscommune@tcs.com mail id and on the contest page of
the campus commune. You will have 6 hours to complete all the challenges given to you starting from 10:00 AM
on 15th December 2018. The 6 hour window is fixed for all participants.

In case you missed to start your round at 10:00 AM, then you will lose that many hours of the contest. For
example if you start the contest at 11:00AM then you will have 5 hours window to cover all the challenges.

Round 1 starts at 10:00 AM and ends at 4:00 PM on December 15th (IST)

Instructions:

 Verify that you can log in to HackQuest URL with your CT ID (as username) and password shared to you
on Campus Commune Contest Page

 Go through the rules of the contest properly before logging in. Each challenge will have a hint. Using the
same, you will require to search for a flag and submit that flag against the challenge. As soon as you
clear the challenge the colour of flag will change from Red to Green in Dashboard page

 Only manual intercepting tools are allowed for analysis of the HTTP request/responses

 You need to prepare a report with the findings, a sample report will be shared to you in Campus
Commune Contest Page. As soon as you crack a challenge save the findings in the report and upon
completing the whole contest upload the report in Campus Commune Contest Page.

 If you are going to use shared infrastructure like college Lab, ensure that HackQuest URL is accessible
from your target environment.

 Site is best viewed in modern browsers like Chrome and FireFox. Ensure you are using a compatible
browser. We recommend you to use Google Chrome for best viewing.

 Ensure that your browser supports JavaScript. Site will not work properly if your browser has blocked
JavaScript.

 Bookmark the URL for quick access for later use.

 Last but not the least, automated scanning should not be attempted, we have proper measures to
identify the same. Anybody who tries to attempt automated scanning will at once be blocked
and will be disqualified from the contest.

Get Set Hack!!