SecLounge SIG: Annual Capture the Flag Challenge

Overview

The first annual Capture the Flag ("CTF") event was launched at the 24th Annual FIRST Conference in Malta 2012. The activities were organized by a collaborative effort between FIRST members and the now retired Dragon Research Group. In 2018, the FIRST SecLounge SIG was chartered to design, develop, and conduct security challenges and competition exercises for the FIRST community.

Due to COVID-19 pandemic in 2020 and 2021, the SecLounge SIG hosted the CTF competitions completely online. The online editions of the CTF were open to the community at large, with more than 800 participants from around the world.

For the 2025 edition, the SecLounge SIG will offer again a hybrid event allowing both remote and on-site participation. The SIG is excited to welcome a set of new challenge contributors to the group this year and hope to keep this year's CTF players engaged throughout the conference week.

The hybrid CTF will run from Monday to Thursday (June 23-26). The communicated scheduled will be in the Central European Summer Time (UTC +2). You must be a registered conference attendee (in-person or virtual) to participate.

How to Play

The CTF consists of a series of technical exercises (challenges) where the participants must find an answer or flag and submit it to the CTF platform.

Every flag submitted contributes to the team's score. A number of new challenges are released every day during the conference and are categorized as network, web, ICS, cryptography, reverse engineering, programming, miscellaneous, puzzle, and so on.

Do You Need a Team?

It is strongly recommended to participate as a team with a maximum of 4 members. Please start planning ahead with your peers also participating. Each team can strategize and assign challenges to members based on their expertise such that the team's combined knowledge is exploited to its fullest potential.

The only condition is to have at least one player on-site.

Will There Be Prizes?

Yes! We will be awarding three teams.

How to Register

Registered attendees of the conference will receive an email prior to the start of conference with registration instructions. A link will also be available within the conference app.

Learn more about the SecLounge SIG