PwnThyBytes CTF 2019 - powered by

Update your tools, stock up on energy drinks and turn off all your notifications 'cause we've got some badass CTF tasks coming your way, guaranteed to keep you plugged in, jacked up, glued down but ultimately knocked out.

You're looking down the barrel of 40 hours of some serious mayhem including but not limited to: mind-bending memory corruption, bewildering binary reversing, convoluted cryptography, feral forensics, and wacky web.

We'll do our best to ensure PTBCTF is engaging by making you dive into arcane secrets of known software or tackle new challenges that expand your knowledge.

What to expect

The competition opens shop on September 28 , 06:00 AM (UTC time) and lasts for 40 hours. There will be approximately 30 challenges spread out into 6 categories:

• Warmup/learning
• Reverse engineering
• Memory corruption
• Cryptanalysis
• Applied coding and forensics
• Web application audit

The following prizes are offered under certain Terms and Conditions:

• I^st place: 2048 €
• II^nd place: 1024 €
• III^rd place: 512 €

Throughout the competition you can contact us on our Discord Server.

The challenges

• All challenges have reference solutions, online challenges will be periodically tested for availability
• Challenges will be rolled out gradually
• Each challenge was reviewed and tested by at least another person besides the author(s)
• All challenges have been designed to be solvable on a modern computer using less than 30 minutes of CPU time
• If you think a challenge is broken or solves too easily, please contact the author on Discord
• Each challenge is finalized by obtaining its associated flag and submitting it on this platform
• Unless specified otherwise, the flag format matches PTBCTF{[^}]*}

The scoring and awards

• Challenges will have dynamic scoring. Some start from 500 and downgrade to a minimum of 50 points. Others start from 1000 and downgrade to a minimum of 100 points
• Solvers will receive points when they submit a correct solution (flag) for a challenge
• There will be NO bonus points for solving a challenge (a.k.a "first blood" points)
• The top three ranking teams at the end of the 40 hour contest have the first claim to the prizes
• To validate their result, they have to submit detailed, commented and working solutions (writeups) within 72 hours of the end of the competition
• We will deduct points for the challenges that have no writeup. Thus, the ranking might change
• To streamline this process, the top 10 teams are also requested to send writeups if they wish to claim prizes in the event of a score change for the top 3
• Teams will refrain from making the writeups public until the writeup submission deadline

Fair play

• Please obey the general etiquette for online competitions
• Do not attack the scoreboard infrastructure
• Do not generate excessive traffic on our endpoints
• There is no need to use automated tools on our challenges (we already made sure they will not work)
• Cooperation between teams is not allowed. We will log and check the network traffic for any signs of fraud
• Seeking external/public help for the challenges is not allowed in anyway (posting on forums, stack overflow, etc). You can do this after the competition ends
• We reserve the right to disqualify/ban a team from the competition for misbehaviour