Opportunity brief
Overview
The year is 2077. Every system is connected, and every system is broken. Someone has to find the cracks before the wrong people do.
Cyberhunt 2077 is a bug-bounty style cybersecurity challenge by the Open Source Developers Community (OSDC), Noida. You get real-world scenarios, you hunt down what's wrong, and you write it up the way security researchers do: as a clear, reproducible, professional bug report.
Finding the bug is half the job. Convincing someone it matters is the other half.
How it works
- You'll receive a set of scenarios/targets: vulnerable apps, code snippets, configs, or system descriptions.
- Investigate each one, identify the vulnerability or flaw, and work out its real impact.
- Submit a bug report for each finding through our platform.
- Reports should be coherent and complete. Weightage is given to accuracy, how comprehensive the report is, and time of submission.
What your report must cover
- Vulnerability overview: a descriptive title, the vulnerability class (e.g. broken authorization, injection), the affected component, and a severity rating (Low / Medium / High / Critical)
- Root cause: the underlying flaw and where it sits in the logic
- Mechanism: how the flaw plays out step by step, and why the system's checks fail to stop it
- Attack path: exactly what an attacker supplies or does to reach the vulnerable behaviour
- Impact: what an attacker concretely gains
- Proof of concept: screenshots, payloads, or code that back up each claim
Who can participate
- Open to anyone
- Participate solo
- No prior bug bounty experience needed. If you're curious about security and can write clearly, you're in. Beginners and seasoned hunters both welcome.
Timeline
- Registrations close: 29th October, 2026 at 11:59 PM
- Event goes live: 29th October, 2026, 11:59 PM
- Submissions close: 30th October, 2026, 11:59 PM
- Results: soon after submissions close
- Mode: Online via OSDC's Discord
Rewards
- .xyz domains for top 3 participants
- Certificates for all participants with valid submissions
Rules
- Only test the targets and scenarios provided. Anything outside scope is off-limits.
- No attacks on event infrastructure, other participants, or third-party systems.
- Plagiarised or AI-generated-without-understanding reports will be disqualified.
- Duplicate findings: the earliest valid, complete report gets priority.
- Judges' decisions are final.
About OSDC
The Open Source Developers Community is a student-run community around Noida, that lives and breathes open source. We're the folks behind OSDHack, CodeJam, Hack Nights, Linux Installfests, and weekly meetups. Our thing is learning by building, breaking, and shipping, together.