VOID CTF, a 24-hour offensive security competition on industrial control systems

CTF

Nobody has reached the bottom.

Online / Qualifiers CTF
24-25 Oct
Mode
Jeopardy
Format
24 Hours
Offline CTF
29-30 Nov
Mode
Attack Defense
Format
24 Hours Offline

Organized by the KIET Cyber Security Center of Excellence

Deep in the desert, a rogue nation-state is trying to weaponize the power of the sun. Your mission, should you choose to accept it, is to sabotagetheir facility and destroy their infrastructure.

A desert nuclear plant with cooling towers on the horizon, a dirt track leading toward it, and a weathered wooden sign reading "CTF challenge 10 km away."

Void CTF encompasses a two-part cybersecurity event. The online qualifier round will have a host of challenges in the domains of Web Exploitation, Cryptography, Reverse Engineering, Binary Exploitation, Forensics. The top 15 scoring teams in this round will advance to the in-person finale event, where all 15 teams will compete in a winner-take-all race to sabotage an actual physical network. Teams will have to work their way through the network to achieve the final objective by exploiting a myriad of different vulnerabilities, ranging from AD exploits to SCADA/ICS hacking.

  1. 01

    Registration

    Form a team, register it, and lock in your roster before the window closes on the 23rd.

    • Online
    • Teams
  2. 02

    Qualifier CTF

    A 24-hour jeopardy-style CTF. Pick challenges off the board across web, pwn, crypto, reversing, forensics and OSINT; every solve banks points, and the top 15 teams go through.

    • Jeopardy
    • Online
    • 24 h
  3. 03

    Qualifier results

    Scores are verified and the 15 finalist teams are announced.

    • Online
  4. 04

    Attack-Defense finals

    Every team hunts the same objective on the physical network for 24 hours. Find your way to it, and throw rivals off the trail along the way: plant false leads, bury the real path, waste their time. Anything goes inside the network. Nothing leaves it.

    • Attack-Defense
    • Offline
    • 24 h
  5. 05

    Closing ceremony

    Final standings are revealed and the winning teams are felicitated on stage.

    • Results
    • Awards

Rules of engagement

These hold for every phase, online and off. Read them before you register.

  • Maximum 4 members per team
  • No attacking infrastructure
  • No sharing flags between teams
  • Respect other participants
  • Have fun and learn!

How it works

The qualifier runs online. The finals run on the physical network built by the organising team.

  1. Qualifiers

    Online24-25 Oct

    Compete in a 24-hour jeopardy-style CTF. The top 15 teams move on to the finals.

  2. Finals

    Offline29-30 Nov

    Attack and attempt to infiltrate the physical network set up by the organising team.