About
About
A beginner-friendly online boot2root CTF. Each team gets a vulnerable virtual machine (OVA) to run locally. Your job is to find your way in, escalate privileges to root, and capture the flags along the way.
Format and Schedule
Mode: Online (the VM runs on your own machine)
Date: 29 October 2026
Start: 6:00 PM IST
Eligibility
Open to all college students
Inter-college teams: allowed
Team size: up to 3 members
Each person can be on only one team
How it works
Register on Unstop.
The encrypted OVA download link will be shared on 29th so you can download it before the event. The password will be released at 6:00 PM on 29 October.
Import the OVA into VirtualBox or VMware, find the target IP, and start hacking.
Submit flags on the CTF platform(The URL will also be given on the day of the event). The scoreboard updates live.
System requirements
VirtualBox or VMware (latest version)
An attacker machine of your choice (Kali Linux, Parrot, or your own setup)
Rules
Internet access and public tools are allowed.
Do not share flags, hints, or solutions with other teams during the event. Collusion leads to disqualification.
Attack only your own local VM. Do not attack the CTF platform, other participants, or any other infrastructure.
Do not attempt to brute-force or spam the flag submission page.
Do not publish writeups or walkthroughs until the organizers announce the event is over.
Flag format: [flag format, e.g. CTF{...}]
Ranking: by number of points, ties broken by who reached the score first.
Organizers’ decisions are final. Any rule violation can lead to disqualification.
If your VM breaks, re-import the original OVA. Contact the organizers if something is wrong with the machine itself.
Prize Pool INR 20k
SupportContact: Saravana Kadir, +91 9486790735, saravanakadir05@gmail.com