Opportunity brief
About
A beginner-friendly online boot2root CTF. Each team gets a vulnerable virtual machine (OVA) to run locally. Your job is to find your way in, escalate privileges to root, and capture the flags along the way.
Format and Schedule
- Mode: Online (the VM runs on your own machine)
- Date: 29 October 2026
- Start: 6:00 PM IST
Eligibility
- Open to all college students
- Inter-college teams: allowed
- Team size: up to 3 members
- Each person can be on only one team
How it works
- Register on Unstop.
- The encrypted OVA download link will be shared on 29th so you can download it before the event. The password will be released at 6:00 PM on 29 October.
- Import the OVA into VirtualBox or VMware, find the target IP, and start hacking.
- Submit flags on the CTF platform(The URL will also be given on the day of the event). The scoreboard updates live.
System requirements
- VirtualBox or VMware (latest version)
- An attacker machine of your choice (Kali Linux, Parrot, or your own setup)
Rules
- Internet access and public tools are allowed.
- Do not share flags, hints, or solutions with other teams during the event. Collusion leads to disqualification.
- Attack only your own local VM. Do not attack the CTF platform, other participants, or any other infrastructure.
- Do not attempt to brute-force or spam the flag submission page.
- Do not publish writeups or walkthroughs until the organizers announce the event is over.
- Flag format: [flag format, e.g. CTF{...}]
- Ranking: by number of points, ties broken by who reached the score first.
- Organizers' decisions are final. Any rule violation can lead to disqualification.
- If your VM breaks, re-import the original OVA. Contact the organizers if something is wrong with the machine itself.
Prize Pool INR 20k
Support
Contact: Saravana Kadir, +91 9486790735, saravanakadir05@gmail.com