How Hackers Play Capture the Flag