Opportunity brief
SilverHill is an offline Attack & Defense Capture The Flag (CTF) organised by d4rkc0de, IIIT-Delhi, under ESYA 2026. Teams will simultaneously attack opponents' vulnerable services and defend their own infrastructure by identifying, exploiting and patching vulnerabilities while maintaining service availability.
Bring Your Own Laptops!! (Suggestion: bring as many as possible)
- Date: 14 November 2026
- Time: 12:00pm to 5:00pm
- Mode: Offline, Team-based Competition
- Venue: C11, Old Academic, IIITD
Eligibility & Registration Guidelines:
- Target Audience: Anyone interested in cybersecurity and CTFs.
- Inter-College Teams: Allowed.
- Inter-Specialization Teams: Allowed; participants from different branches and years may form a team.
- Team Size: 6 people max
- Prerequisites: Basic understanding of cybersecurity, networking and computer systems is recommended.
Competition Format:
- Format: Offline Attack & Defense CTF.
- Infrastructure: Teams will receive isolated environments containing vulnerable services.
- Objective: Attack other teams' services while protecting and maintaining your own.
- Scoring: Points will be awarded based on successful attacks and service availability/defence.
- Monitoring: Automated service monitoring and scoring will be used.
- Number of Services/Challenges: To be announced during event.
- Duration: To be announced.
Skills & Areas Covered:
Participants may encounter challenges involving:
- Web Security, Binary & System Security, Network Security, Vulnerability Research, Exploitation, Defensive Security.
Rules & Code of Conduct:
- Teams may attack only the assigned competition infrastructure of other participating teams.
- Attacking the college network, competition infrastructure, organiser systems or any external infrastructure is strictly prohibited.
- Do not launch DoS/DDoS attacks against the competition infrastructure.
- Teams must defend and maintain the availability of their own assigned services.
- Sharing flags, credentials, exploits or competition-sensitive information with other teams is prohibited unless explicitly permitted.
- Attempts to manipulate the scoring system, monitoring system or competition infrastructure are prohibited.
- Any vulnerability discovered in the underlying competition infrastructure must be reported to the organisers.
- Organisers reserve the right to disqualify teams violating competition rules.
- The organisers' decisions regarding scoring, disputes and disqualifications will be final.
Organised By: d4rkc0de, IIIT-Delhi
- Points of Contact: Pranjal Solanki, Siddharth Sharma, Shawn Theo Moses
- Email: d4rkc0de@sc.iiitd.ac.in