GPN CTF 2025

Overview

This game is still in development and will be released soon.

The KITCTF team invites you to a game of CTF at this year’s GPN. The game starts at June 20, 10:00 UTC and ends at June 21, 22:00 UTC. You can participate online or come to the game table at the GPN.

From casual players to board game enthusiasts, whether you go solo, team up or bring all your friends - everyone is welcome to participate.

Sponsors

KITCTF thanks our sponsors GitHub Security Lab, Zellic and Telemaxx for supporting the competition with prizes and infrastructure!

Prizes

• 1st place: $750
• 2nd place: $450
• 3rd place: $300

Writeup prizes

• Best overall writeup: $200 (1 time)
• Best unintentional solution: $50 (1 time)
• Best writeup of the pwn, rev, misc, crypto, web category: $150 (5 times)

We cannot give prizes to individuals on the U.S. sanctions list, or any individual residing in any U.S.-sanctioned country.

Rules

• We will primarily use Discord for communication (join the Server now).
• Each player may only participate in one team. The number of players participating in a single team is not limited. You may share one account to access the contest platform.
• If you have a question or a problem, please reach out to us (e.g. if a seemingly valid flag gets rejected).
• The flag format is GPNCTF{.*} (only printable ASCII characters), unless specified otherwise in the challenge description.
• We use dynamic scoring. That means, challenges which are solved more often will be worth less points. Every team that solves a challenge is awarded the same amount of points, the scores will be updated dynamically.

The following behavior is strictly prohibited:

• Any behavior that affects the fairness of the contest.
• Posting or sharing task solutions, flags or handouts during the event.
• Attacking the contest infrastructure or systems of organizers or other participants. Only the servers mentioned in challenge descriptions or resources are in scope. The event is hosted during the GPN23, but attacking GPN infrastructure is strictly prohibited.
• Exploiting vulnerabilities in the contest infrastructure or purposefully breaking challenges for others. If you find such a vulnerability, please report it to us.

Sponsors

Thank you to our sponsors for supporting the CTF!

GitHub Security Lab — Main and prize sponsor

GitHub Security Lab’s mission is to inspire and enable the community to secure the open source software we all depend on.

Zellic — Writeup prize sponsor

Zellic is a security research firm. We hire top CTF talent to solve the world’s most critical security problems. Before Zellic, we founded perfect blue, the #1 CTF team in 2020 and 2021. We hire internationally, and we look for people experienced in vulnerability research (VR) / binary exploitation, reverse engineering (RE), cryptography, or web security.

To learn more about Zellic, check out our blog: https://www.zellic.io/blog/the-auditooor-grindset
Work at Zellic: jobs@zellic.io | @gf_256

Telemaxx — Infrastructure sponsor

TelemaxX Telekommunikation GmbH is a Karlsruhe-based provider of state-of-the-art data center, housing, managed and telecommunications services for business customers.

GPN23

Play online or in person at the GPN23. The 23^rd Goulash Programming Nights are one of the biggest events of the European hacking scene. It is hosted by the local Chaos Computer Club Community, the Entropia e.V., and is open to everyone, not only “digital natives” and nerds. Program-wise, the GPN will feature a variety of talks with both technical and social topics. As the name implies, it also offers a space for programming and tinkering as well as presenting and discussing projects and topics. And of course, the famous goulash and other freshly prepared dishes will keep you satiated and strong while hacking!

We will host the CTF live at the GPN. Feel free to visit us there for information about CTFs and getting to know the team behind the competition.