Project Circuit Breaker

Hacker Resource Mining Contest 
Target: [coming soon]

Venue

  • Location: [coming soon]
  • Participation by prior invitation only.
  • IDs will be checked at the door. No ID, no entry.
  • No guests allowed without prior approval.
  • Event will start on time with or without you, don’t be late.
  • Signed [Affidavit of Eligibility and Liability/ Publicity Release] is required upon entry.

Schedule

  • 4:00pm  – Check in begins
  • 4:30pm – Target announced; Begin recon
  • 6:30pm – Dinner available
  • 7:00pm – Deadline for data submission
  • 7:05pm – Judging ends; Winners identified
  • 7:15pm – Social

Rules

  1. Intel(R) Bug Bounty Program Terms apply to this event.
  2. No hard testing. There should be no security alerts triggered by your activities.
  3. OSINT, scanning, automation, and custom tools are allowed and encouraged.
  4. Data must be submitted through the Intel program on Intigriti before 7:01pm PST August 10th 2023.  A report with your tool output, notes, etc must be submitted before the deadline to qualify for the Golden Ticket raffle.
  5. This is not a vulnerability hunt. If any vulnerabilities are identified they must be reported through the Intel(R) Bug Bounty Program  and will be subject to the standard program eligibility and terms. Vulnerabilities in the stated target are not eligible for bounties during this contest.

Hacker Goals

  1. Enumerate as much of the perimeter of the target as you can in the time allowed.
  2. Identify product information, exposed ports, IPs, domains, components (vulnerable or not). Gather as much as you can about this target in the given time.
  3. Provide speculation on types of vulnerabilities you would like to test for and expect might be found.

Need help? Contact nahamsec or flyingtoasters on Slack.

Hacker Resource Mining Contest Giveaway
Terms and Conditions:

  1. If you complete and submit the reconnaissance data, we will give you a Project Circuit Breaker swag bag. We have 25 Project Circuit Breaker swag bags to offer and they will be distributed on a first come, first served basis.
  2. No purchase of any kind is required to participate in this offer.
  3. This offer is only valid from August 10th 4pm PST (Pacific Standard Time) and will expire at 7pm PST on August 10th, or when all the Project Circuit Breaker swag bags available have been distributed, whichever comes first.
  4. During this period you are limited to receiving only one Project Circuit Breaker swag bag.
  5. Intel is not responsible for entries not received due to lost, failed, delayed, or interrupted connections or miscommunications, or other electronic malfunctions, or if the participant submits an incorrect or invalid name, email, and mailing address.
  6. This offer excludes employees of Intel Corporation, its affiliates, or subsidiaries, advertising and promotion agencies, and the immediate families of each.
  7. Items offered are not redeemable for cash.

Official Rules for the Hacker Resource Mining Contest 

These rules (the Rules) govern the Intel Hacker Resource Mining contest (the “contest”) and set out the terms and conditions between Intel Corporation and its affiliates (“Intel” or “us/we”) and each participant (“participant” or “you”). A submission to this contest constitutes your acceptance of these Rules. 

 

1. How to Enter

Intel Corporation, (the “Sponsor”) is offering the Hacker Resource Mining contest (the “Contest”) and will award prizes based on the results of judging all valid entries against the criteria established in these Official Contest Rules (the “Rules”). Submit SaaS (Software as a Service) product reconnaissance data between 4:00pm PST (Pacific Standard Time) August 10th, 2023, and 7:00pm PST August 10th, 2023 (“contest period”). During the contest period submit your entry by attaching your data to a report and submit it to the Intel® Bug Bounty Program on the Intigriti platform (go.intigriti.com/intel).

2. Eligibility

Contest is open to residents of countries whose residents are otherwise eligible to participate in the Intel(R) Bug Bounty Program. All national and local laws and regulations of the contestant’s country of residence apply. Residents of countries under U.S. embargo are not eligible to enter. Contestants must be 18 years of age or older. Employees, officers, and representatives (and members of their immediate families and those living in the same household of each) of Intel Corporation, its parents, subsidiaries and affiliated companies, advertising and promotion agencies and any company involved in the design, execution, production or judging of this promotion (“contest entities”) are ineligible. Void where prohibited.

 

3. Entry Requirements

Data from reconnaissance activities that presents information about the perimeter security and/or attack surface of the specific SaaS environment. This should include things such as IPs, domains, ports, services, software fingerprints, accounts, interfaces, and any other information identified after searching the source materials provided.

 

4. Judging

Submissions will be judged on August 10th, 2023, by Chris Holt (Intel Bug Bounty Program Manager). Judges with evaluate all eligible submissions on the following criteria: (1) Data is in a readable format and language, (2) information about the test systems indicates the intended system was correctly targeted, (3) content includes attack surface information about the target, and (4) information provided appears complete. Judges’ decisions are final. You may withdraw your submission at any time by notifying Sponsor. If a submission is withdrawn your right to win a prize is terminated.

 

5. Ownership and Publicity

Sponsor does not claim ownership of your submission to the contest; but by submitting an entry, you are granting Sponsor and its affiliated companies the following worldwide, non-exclusive, perpetual, irrevocable, royalty-free, unconditional, fully paid-up rights: (1) to make, have made, use, copy, reproduce, modify, and create derivative works of the contributions, (2) to publicly perform or display, import, broadcast, transmit, distribute (directly and indirectly through multiple tiers), license, offer to sell and sell, rent, lease, or lend copies of the contributions (and derivative works thereof), (3) to sublicense to third parties the foregoing rights, including the right to sublicense to further third parties, and (4) to publish your name or alias in connection with this contest and your contributions.

Contestants understand and agree that their submission may be posted and publicly viewable. By providing a submission, you grant Sponsor and its affiliated companies the right, except where prohibited by law, to use your name for promotional purposes in promoting or publicizing the contest. Sponsor, however, does not have any obligation to use the winning Entries for any purpose.

 

6. Participant Warrants

By submitting an entry you warrant that your submission: 

  • does not contain any content that infringes on any third-party intellectual Property (IP) rights, and that you own or otherwise have all rights necessary for the submission including any and all IP rights  
  • does not disclose any information which would constitute a violation of a confidentiality obligation; 
  • does not contain any viruses, worms, spy ware, or other components or instructions that are malicious, deceptive, or designed to limit or harm the functionality of a computer; and 
  • is not subject to license terms that require any software or documentation incorporating or being derived from your contributions to be licensed to others.

7. Prizes

5 prizes will be awarded based on the judging. Prizes will consist of an invitation to participate in the Knights of Elektron (1337UP1023) Live Hacking Event hosted by Project Circuit Breaker and Intigriti in Lisbon, Portugal on October 6 – October 22, 2023. Qualification for participation in the Knights of Elektron event will be evaluated separately. Invitation does not guarantee participation. If the winner is deemed qualified to participate, the prize includes flight and hotel accommodation not to exceed $1,500 in total. Limit of one prize per submission. Winners will be notified in person and via Intigriti.com report comment within 90 minutes from judging. If after 48 hours of the second notification to the winner no acknowledgement or response is received the prize is forfeited, and Sponsor will select another winner.

The winner may be required to complete an Eligibility Confirmation and a Liability/Publicity Release (unless prohibited by law). The Confirmation and the Release must be returned within ten (10) days of receipt of these documents. Non-compliance with any of these requirements may result in disqualification, in which case an alternate winner may be chosen.Substitution or transfer of Prizes are not allowed, and Prizes may not be redeemed for cash. If a Prize becomes unavailable or is prohibited by law Sponsor may at its sole discretion award a substitute prize of equal or greater value. The winner accepts responsibility for all federal, state, and local taxes and fees in connection with the prizes.

Apart from prizes offered as part of the contest, no monetary compensation will be paid for any of your contest submissions. Intel is not responsible for contest entries not received due to lost, failed, delayed, or interrupted connections or miscommunications, or other electronic malfunctions. Intel is not responsible for incorrect or inaccurate entry information, whether caused by you or any other persons or by any of the equipment or programming associated with or utilized in the contest.

COMPLIANCE CERTIFICATION

Intel is committed to compliance with all applicable laws, regulations, policies, and ethics rules. This notice is intended to ensure that your participation in this Contest will not violate any such laws, regulations, policies, or rules. Intel seeks no promises or favoritism for itself or any of its affiliates in exchange for the opportunity to participate in the Contest.  By entering the Contest, (i) you agree that your participation in the Contest – including your acceptance of any potential prize – will not violate any law, regulation, policy or rule of your country, state or government agency;  (ii) you certify that any potential prize is not in exchange for an agreement to influence a recent, pending or anticipated act or decision that may result in Intel obtaining or retaining business or a business advantage; and (iii) you agree to submit certain screening information, such as information needed to confirm that you are not on a sanctions / SDN list, to be qualified to redeem the prize.

 

8. Sponsor’s Warranties and Disclaimers

Sponsor does not provide any warranty on the prize, and the winner should look solely to the manufacturer for the warranty. To the fullest extent allowable by law, Sponsor specifically disclaims any representations or warranties, express or implied, regarding the contest or the prizes including any implied warranty of merchantability or fitness for a particular purpose and implied warranties arising from course of dealing or course of performance.

 

9. Release of Liability and Issues of Law

By participating, all entrants release Sponsor, its affiliates, partners, subsidiaries, officers, directors, agents, employees, and all entities associated with the development and execution of this promotion from any and all liability with respect to and in any way arising from participating in this promotion, acceptance, or use of prizes. Entrants also agree that Sponsor, its affiliates, partners, subsidiaries, officers, directors, agents, employees, and all entities associated with the development and execution of this promotion are not responsible or liable for any injury or damage to an entrant’s or third person’s computer related to or resulting from the Contest, the submission and/or its prizes. Sponsor is not liable for damage to a user’s computer system (including, without limitation, any server failure or lost, delayed, or corrupted data or other malfunction) due, either directly or indirectly, to an entrant’s participation in the Contest or downloading of information in connection with the Contest. Sponsor reserves the right to modify or cancel the Contest if any portion of any website used to administer any aspect of the Contest becomes technically corrupted.

Sponsor assumes no responsibility for any error, omission, interruption, deletion, defect, delay in operation or transmission, communications line failure, theft or destruction or unauthorized access to, or alteration of entries. Sponsor is not responsible for any problems or technical malfunction of any telephone network or telephone lines, computer online systems, servers, or providers, computer equipment, software, failure of any e-mail or entry to be received by Intel on account of technical problems, human error or traffic congestion on the internet or at any web site, or any combination thereof, including any injury or damage to participant’s or any other person’s computer relating to or resulting from participation in this contest or downloading any materials in this contest.

All Federal, state, and local laws and regulations are applicable. THE DELAWARE COURTS (STATE AND FEDERAL) SHALL HAVE SOLE JURISDICTION OF ANY CONTROVERSIES REGARDING THE CONTEST AND THE LAWS OF THE STATE OF DELAWARE SHALL GOVERN THE CONTEST. EACH ENTRANT WAIVES ANY AND ALL OBJECTIONS TO JURISDICTION AND VENUE IN THOSE COURTS AND HEREBY SUBMITS TO THE JURISDICTION OF THOSE COURTS. The Contest is void where restricted or prohibited by law.

Sponsor’s entire liability and your sole and exclusive remedy will be limited to a distribution of the equivalent amount of prizes as set forth above. By participating in the contest, you waive any and all rights to bring any claim or action related to such matters in any forum beyond one (1) year after the first occurrence of the kind of act, event, condition, or omission upon which the claim or action is based.

 

10. Generally: Sponsors may make changes to these rules at any time without notice to you. The most current version of the rules will be available at https://www.projectcircuitbreaker.com/knights-of-elektron-preliminary. Contributing to the contest or accepting prizes will constitute acceptance of the revised rules. These rules prevail in the event of any conflict or inconsistency with any other communications, including advertising or promotional materials

If, for reasons beyond Sponsor’s control (including, but not limited to, tampering or computer virus infection), the contest is not capable of running as originally planned, Intel, at its sole discretion, reserves the right to cancel or modify the Contest, without liability. Intel will not be responsible for lost, late, misdirected, damaged, or illicit submissions, or for Internet, computer hardware and software, phone, and other technical errors, omissions malfunctions, and delays. Entries are void if they contain material, typographical, or other errors. All entrants agree to comply fully with each provision in these Rules.  Any person attempting to defraud or in any way tamper with this Contest and any person who does not comply with these Rules, will be ineligible for any prize(s) and may be prosecuted to the full extent of the law.

11. For any feedback or questions regarding the contest or the prizes you can contact Intel by sending an email or by participating in the contest discussion forum. Questions may be sent to the Project Circuit Breaker team: project.circuit.breaker@intel.com.

12. The Sponsor of this contest is Intel Corporation. The contest is administered by:

Intel Corporation
2200 Mission College Blvd
Santa Clara, CA 95054
United States of America
project.circuit.breaker@intel.com