Recon 2k26
Capture The Flag
Hunt. Break. Defend.
Breach the systems. Decode the secrets. Capture every flag. Your skills are the only weapon you need.
Countdown
Attack Vectors
Pick your battleground. Each domain demands a different skillset.
SQLi, XSS, SSRF, RCE — break through web defenses and pwn the backend.
RSA, AES, hashing flaws — crack the math that's supposed to keep things safe.
Memory dumps, pcaps, disk images — find the needle in the digital haystack.
Stack smashing, heap feng shui, ROP chains — own the binary, own the system.
Disassemble, decompile, debug — tear the binary apart until it gives up its secrets.
Stego, recon, scripting, creative hacks — if it doesn't fit elsewhere, it lives here.
Ready to Compete?
The clock is ticking. Register, pick your targets, and start capturing flags.
Join the Fight
Indian Institute of Technology Madras — India's top-ranked engineering institution, pioneering research in AI, cybersecurity, and deep tech innovation.
VIT-AP University — a premier institution fostering innovation, research, and industry-ready talent across engineering, sciences, and technology disciplines.
Information Security Education and Awareness (ISEA) — a Government of India initiative to build a cybersecurity-aware society through training and capacity building.
Ministry of Electronics and Information Technology — the Government of India ministry driving digital transformation, cybersecurity policy, and IT infrastructure.
Digital Fortress — a cybersecurity firm providing vulnerability assessment, penetration testing, and security consulting to protect digital assets.
Amazon Web Services — the world's leading cloud platform providing scalable infrastructure, AI/ML tools, and security solutions powering this CTF. TECHNOLOGY PARTNER
Magsmen — strategic consulting and event management partner helping bring world-class cybersecurity competitions and conferences to life. STRATEGIC PARTNER
India's leading cybersecurity training and certification provider specializing in ethical hacking, penetration testing, and red team operations.
Free, comprehensive API security education platform offering courses on OWASP API Top 10, API penetration testing, and secure API development.
Advanced cybersecurity training focused on Active Directory attacks, red teaming, and offensive security certifications for professionals.
Premier cybersecurity and networking training platform offering hands-on labs, certification paths, and expert-led courses for security professionals.
Ethical hacking education platform providing practical courses on penetration testing, bug bounty hunting, and offensive security techniques.
Bug bounty hunter and content creator educating the community on web application security, XSS vulnerabilities, and real-world hunting techniques.
Cybersecurity training and advisory platform offering practical courses, CTF challenges, and career guidance for aspiring security professionals.
A lightweight, modern web security auditing toolkit built in Rust — the next-generation alternative to traditional web proxies.
.xyz is the domain for every website, everywhere — a top-level domain trusted by tech innovators, creators, and the next generation of the internet.
A student-driven cybersecurity community organizing workshops, hackathons, and CTF competitions to build the next generation of security talent.
Open-source security community dedicated to offensive security methodology, tool development, and collaborative security research.
Open Security community fostering collaboration, knowledge sharing, and hands-on learning in cybersecurity and offensive research.
The Mumbai chapter of HackTheBox — a global cybersecurity community offering real-world hacking labs, challenges, and competitive CTF events.
BSides Vizag is a community-driven information security conference bringing together hackers, researchers, and professionals in Visakhapatnam.