Two scoreboards
As announced on Discord, there are two scoreboards this year: AI and No-AI. Logistics and rules are online.
Read the rules
24 h
HFCTFHackfest CTF 2026
The 18th Hackfest CTF, themed "LEVEL UP": 24 hours of challenges, as a team, on site.
- Teams
- 60+
- Per team
- 6 players
- Duration
- 24 h
- Format
- On site only
To play, you need a Hackfest general admission ticket in addition to the CTF ticket.
The competition
HFCTF is a 24-hour competition between more than 60 teams of 6. Teams take on dozens of challenges related, closely or loosely, to cybersecurity. The event is on site only, at the Quebec City Convention Centre.
Registration
-
Now
Get your tickets
A Hackfest general admission ticket is required in addition to the CTF ticket. Not sure which ticket to pick on Eventbrite? Message us on Discord, in the #hfctf-general channel.
-
October 29
Create your team
The login platform opens and you create your team there. Do it as early as you can: only full teams (6 people) are allowed into the CTF room. Missing players? The platform has a matchmaking module, and the #hfctf-matchmaking Discord channel brings together players looking for a team and teams looking for players.
-
October 29, 4 PM
Check-in and doors open
Check in at the front desk and the CTF room opens. Only complete tables get in:
- The check is done on site with a QR code
- The CTF WiFi opens too
- All the details will be in the login platform
Schedule
- October 29, 6 PM CTF starts
- October 30, midnight to 8 AM Reduced challenge support (challenges stay available)
- October 30, 5 PM Scoreboard freeze
- October 30, 6 PM CTF ends
Challenges
| Challenge | Category | Designer |
|---|---|---|
| secure'nt - levelup | Web, cloud | Brainmoustache |
| The Stargate Protocol | Game hacking, network, reverse engineering | dax |
| Grandma's secret | Stenography | dax |
| 24 seconds | Misc | dax |
| Hackfesse | k8s | Dekciw |
| The Vertex Directive | Log analytics | dystopie |
| Dead Build | Reverse engineering | Escartem |
| Uni-records | Web | f1x8 |
| hackcam | IoT | f1x8 |
| Portal-Tech Breach | Web | Hawa |
| Georges Laraque | Forensics | Houssem0x1 |
| Infected | Forensics | Houssem0x1 |
| King of the Hill | Scripting | MaxWhite |
| bAbY SaFeTy | Web | opʎʞuɐɹℲ |
| YOLO to prod | SDLC, DevOps | s3z |
| H1dd3n L00t | OSINT | s3z |
| Azure pentest | Azure | salt |
| Domain Ascension | Active Directory | somecanadian |
| A relic from the Past | Physical, electronic | TheKGBspy |
| Mercury | Game hacking, pwn | the lkdo |
| Squirrel The Game | Game hacking | TheSenate |
Good to know
Food
The Convention Centre does not allow outside food in the CTF room.
Closing ceremony
October 31, 5:40 PM
Thanks to partners and volunteers, CTF prizes and a look back at the competition.
Ready for 24 hours of CTF?
Get your tickets, build your team of 6 as soon as the platform opens on October 29, and meet us on site at 4 PM.
