This is not typical / real world situation, leaving only two clear routes of attack. Discover a new vulnerability, and subsequently produce a working exploit for it which is far fetched or go after server misconfigurations. A social engineering based attack is pretty much ruled out by the fact it's a lab environment.

The website gives off mixed messages, written in a light-hearted tone that would likely put of the more legitimate hackers / security professionals, unless that's the intention of its *carefully* worded content with frequent mentions of the $250 you can get for successfully achieving a number of goals. Corporate Technologies are a company who have both the experience and opportunity to run such a project, mainly in the form of their point man John A. "Cobras" Klein. Which leaves only the questions of why and what do they have to gain? The faq page gives the answer to this question as


Click here to go to this article.