Platypwn 2023

• Read our rules.
• Join the Discord server for this event.
• Press the login button here in CTFd and register in our single sign-on solution.
• Download a VPN config to access the challenges.
• Have fun!

In order to gain some work experience in addition to your student life, you applied for an internship at the digitisation authority in Dasdorf, a tranquil town somewhere in Brandenburg. There you were immediately welcomed more than effusively. A little suspiciously, you start your internship on the first day and immediately find the following printout on your new desk:

Dear Sir or Madam!
As mentioned in last week's fax, the Digitisation Department of Dasdorf is currently in an exceptional situation. Once again, daring digitisation delinquents (hereinafter referred to as DDD) have managed to gain access to the internal infrastructure and obtain private information. We also fear that the DDD are still among us and are planning further attacks. Therefore, remain vigilant and be sure to implement known best practices. Any pertinent information of the form PP{[0-9a-zA-Z_\-]+} can be delivered to me personally in the digitisation letterbox.

Yours sincerely
Donas Dittrich
Director of the Digitisation Department Dasdorf

Please check whether this e-mail really needs to be printed out.

What a coincidence that you know about digitisation! Can you find your way through the German digitisation jungle and help Donas Dittrich catch the DDD?

The Platypwn is brought to you by the Cybersecurity Club @ HPI. We are the academic team of the Hasso Plattner Institute in Potsdam, Germany and participate in CTFs as the Platypwnies. If you have any questions, feel free to contact us on our Discord server or write us an email to klub-cybersecurity-sprecher (at) hpi (dot) de.