Hackfest is the Tunisian National Cyber Security CTF Competition. The competition is meant for both beginners and experienced contestants and consists of two phases. A qualification round and a final round. During qualification round contestants will compete individually to win slot for the final round. Only 10 teams will qualify for finals. Final round is multi-team hacking challenge in which teams compete independently to win prizes. It lasts 12 hours during which the finalists will try to tackle challenges in numerous categories. * Cryptography * In this category, you'll attack poorly implemented crypto, outdated crypto, or use well-known vulnerabilities to attack encrypted messages. * Binary Reverse Engineering/Exploitation * In this category You'll receive a program, but not the source, so you need to disassemble it, look at the assembly, and figure out what it does or figure out its vulnerability, and use that to take exploit the remote service into serving you a flag. * Forensics * This is a fairly broad category. You might receive an image of a disk in FAT format, and you'll need to un-delete files. Maybe you receive a file that is in some obscure file format you've never heard of, and unpacking the entire chain eventually gives you a flag. * Web Exploitation * These challenges involve attacking common vulnerabilities in web technology. For example, you might need to use SQL injection to read the "secret_flag" table of a database, use Cross-Site Scripting to trick a simulated user to send you their password, or bypass some client-side checks implemented by obfuscated javascript. * IoT * These challenges involve attacking Embedded/IoT devices. You might receive an Arduino board, and you'll need to dump and analyse a firmware. Maybe you receive a binary program, that contains memory management vulnerability, exploiting the entire flow gives you a privileged access to read sensitives data in the board.