Web
Injection, auth bypass, SSRF, request smuggling. Targets modelled on real-world stacks.
Category
Being built
Founded 2026 · first edition
Cross the river.
Take the flag.
Styx CTF is the club's own jeopardy competition, built end-to-end by members. The club was founded in 2026, so the first edition is still being written — no date has been fixed yet.
Date to be confirmed
The first Styx CTF has not been dated yet.
No date, venue or challenge count is final. When the board locks the date it is announced here and in the intranet — members get the earliest slot.
No countdown, because there is no confirmed date
Format
Jeopardy planned
Static challenges, dynamic scoring
Team size
1–4 players
Mixed-skill teams encouraged
Entry fee
Free for students
ID required at check-in
01 Categories
Six ways in.
The categories the first edition will cover. Difficulty will span absolute beginner to genuinely nasty, with written hints after the first two hours.
Pwn
Stack and heap corruption with escalating mitigations. Every binary ships with source.
Category
Reverse
Stripped binaries, custom VMs, packed samples. Ghidra and gdb are your friends.
Category
Crypto
From classical ciphers to misuse of modern primitives. Maths allowed, guessing is not.
Category
Forensics
Disk images, memory dumps, packet captures. Reconstruct the story before the timer runs out.
Category
OSINT
Public data, consenting targets, and the patience to connect three dots.
Category
02 Hall of flags
No results yet.
Standings appear here after the first edition has run.
Scoreboard empty
No team has played Styx CTF yet.
There is no previous edition to report. The first leaderboard will be published the evening the competition ends.
Reserved for the first edition
03 Registration
Put your interest on the list.
There is no fixed date and no closing date yet. Leave your details and the board will contact you the moment the first edition is locked in.
01
Register interest
One form per team. Nothing is binding until a date is announced.
02
We confirm the date
Confirmation plus a team code lands once the board publishes the calendar.
03
Show up on the day
ID check, network briefing, and laptop setup before the clock starts.
Team registration of interest
Fields marked * are required.
04 Rules
The short version.
The five rules that will not be negotiable when the first edition runs. Full rules go to registered teams before the event.
Attack the challenges, not each other
Any attack against the scoreboard, the infrastructure hosting it, or another team's machine is grounds for immediate disqualification. One exception: the designated King-of-the-Hill box, if announced.
No flag sharing
Flags are per-team. Sharing a flag with another team forfeits both teams' points for that challenge.
Internet is allowed, AI assistants are allowed
This is a real-world simulation. Documentation, search engines and AI assistants are all fair game. Reading another team's written solution mid-event is not.
Submit early, submit often
No penalty for wrong submissions, but rate limiting applies after 20 attempts on a single challenge. Dynamic scoring means points decay as more teams solve a challenge.
Be the kind of person we want in the lab
Beginners are welcome and expected. If you finish early and see someone stuck, help them — the community award is worth more than third place.
Not competing? Come watch.
Spectators will be welcome all day. A beginner track runs in parallel with a dedicated mentor for first-time CTF players.