InIt CTF

Guidelines: Eligibility: Open to all students, self-taught learners, and cybersecurity enthusiasts across India (and internationally). No prior CTF (Capture The Flag) experience required. This event is explicitly designed for beginners, alongside enough depth for experienced players. Participants can register solo or as part of a team. Team Composition: Team size: 1 to 4 members. Inter-college teams are allowed. Members do not need to be from the same college or institution. Inter-specialization/inter-branch teams are allowed. Members can be from any academic background (CS, IT, ECE, or non-technical branches) — cybersecurity draws on a mix of skills, and mixed teams are welcome. Each participant may be part of only one team. Duplicate registrations across multiple teams are not permitted. Format — Jeopardy-style CTF: Challenges are organized by category and point value; teams solve independently and submit flags for points. Categories: Web Exploitation, Cryptography, Digital Forensics, OSINT, and Misc. Approximately 20-25 challenges in total, weighted toward easy and medium difficulty, with a small number of harder challenges for advanced participants. Single round, 8 hours continuous, fully online. Hosted on CTFd; platform access and login details will be shared with registered participants ahead of the event. Duration: Total competition window: 8 hours (single round, no eliminations or multiple stages). Exact start time will be communicated to registered participants and posted on the event page. Prizes & Certificates: Certificate of participation for every registered participant who takes part. Additional certificates of achievement and prizes for top-performing teams, finalized closer to the event date as sponsors are confirmed. Rules: Registration is free and must be completed before the stated deadline. Late registrations will not be accepted. Each team may have 1 to 4 members. Team composition cannot be changed after the registration deadline. Participants must only interact with the challenges and infrastructure explicitly provided for the competition. Attempting to attack, disrupt, or gain unauthorized access to the CTFd platform, event infrastructure, or organizer systems is strictly prohibited and will result in immediate disqualification. Sharing flags, hints, or solutions with other teams during the competition window is not allowed. Each team must submit under one account/team entry. Creating duplicate or alternate accounts to gain an advantage is prohibited. The use of automated scripts or tools to brute-force flag submissions is not permitted. Participants may use publicly available resources, tools, and search engines during the competition — this is not considered cheating. Any unintended vulnerabilities or bugs found in the platform or challenges must be reported privately to the organizers and must not be exploited for additional points. All decisions regarding scoring, disputes, and disqualifications made by the organizers are final. Participants are expected to maintain respectful conduct in all official communication channels (Discord, event chat, etc.) throughout the competition. Prize and certificate eligibility may be subject to a brief verification step (e.g., a short writeup or walkthrough of solved challenges) for top-placing teams. Organizers reserve the right to modify rules, challenge availability, or event timing if required for the fairness or smooth conduct of the competition, with participants notified of any changes.