BREAK THE CODE.
CAPTURE THE FLAG.
Think like a hacker. Investigate digital evidence. Crack encrypted messages. Find vulnerabilities. Join KIT-Rankathon — CTF and put your cybersecurity skills to the test.
Awards + Free Internship
Top 3 teams win awards and a free internship opportunity to level up their cybersecurity careers.
CTF Competition Roadmap
A full day of hands-on security investigation, technical problem-solving, and team-based attack-chain analysis.
Registration & Environment Setup
Team check-in, platform access, workspace setup, and connectivity checks.
Welcome, Rules & Platform Briefing
Competition rules, scoring, responsible testing boundaries, submission process, and technical orientation.
Round 1 — API & Web Application Security
Investigate application security, identity and access controls, authorization design, and secure service interactions.
Round 2 — Applied Cryptography
Analyze cryptographic designs, encoded data, hashing practices, and encryption-related security weaknesses.
Lunch Break
Recharge and connect with fellow participants before the afternoon investigation rounds.
Round 3 — Network Forensics & Protocol Analysis
Examine network evidence, interpret protocol activity, and investigate suspicious communication patterns.
Round 4 — Git Forensics & DevSecOps
Review software development artefacts, repository history, configuration practices, and secure delivery workflows.
Advanced Round — Compound Security Scenarios
Connect evidence across multiple security domains, prioritize findings, and solve integrated, multi-stage scenarios.
Final Submissions & Score Verification
Complete submissions, validate scores, and finalize the competition leaderboard.
Results, Awards & Closing
Winner announcement, awards, internship information, acknowledgements, and closing remarks.
Cybersecurity Domains
Explore six broad security domains. Specific challenge briefs and scenario details are reserved for registered participants during the event.
API Security
Authorization, authentication, access-control design, service exposure, and secure API usage.
Web Application Security
Application assessment, input handling, session security, configuration, and common web risk patterns.
Applied Cryptography
Cryptographic reasoning, data protection, hashing, encryption concepts, and key-management practices.
Network Forensics
Packet-level investigation, protocol analysis, traffic interpretation, and digital evidence handling.
Git Forensics & DevSecOps
Repository investigation, development workflow security, configuration review, and secure delivery practices.
Compound Security Scenarios
Multi-domain investigation that rewards careful analysis, evidence correlation, and collaborative problem-solving.
Ready to Capture the Flag?
Bring your curiosity. Trust your logic. Work as a team.
Investigate real-world security concepts in a controlled competition environment.