Web
Injection, auth flaws, SSRF, template injection and deserialisation. OWASP patterns against real, broken stacks.
StyxSec is the cybersecurity club of 1337 Rabat. A crew of students who spend their nights in terminals — reverse engineering, hunting bugs, and dragging flags back across the river.
Everything we run is hands-on. You will not sit through slides about what a buffer overflow is — you will pop one in week two.
Injection, auth flaws, SSRF, template injection and deserialisation. OWASP patterns against real, broken stacks.
Ghidra, x64dbg and Frida. Stripped binaries, custom VMs and packed samples taken apart until they make sense.
Stack and heap fundamentals, ROP, format strings, and every mitigation you will have to bypass.
Cloud attack surface, IAM misconfiguration, containers, CI/CD, and the metadata paths everyone forgets.
End-to-end engagements: recon, exploitation, and a report a triager will actually accept.
StyxSec is new. Rather than publish numbers we cannot back up, here is exactly where the club stands.
Our own jeopardy CTF, built entirely by club members across six categories. The first edition is still being written — the date is not fixed yet.
No countdown, because there is no confirmed date. Register your interest and you will be told first.
StyxSec operates inside 1337 Rabat — the peer-to-peer coding school on UM6P's Rabat campus. No teachers, no lectures: you learn by building, and by breaking.
Host campus. Peer-to-peer, project-based, 42 Network curriculum.
Academic parent. Mohammed VI Polytechnic University.
Global curriculum and the wider campus network.
Applications are open to every student at 1337 Rabat and UM6P Rabat. No prior CTF experience required — just curiosity and a terminal.