The MCH2022 CTF (Capture the Flag) is the official CTF of the MCH2022 hacker camp. The CTF consists of multiple hacking related challenges in multiple difficulty levels and is once again organized by the same team that organized the OHM2013 and SHA2017 CTFs. However, this year the CTF will have a stronger focus on the on-site visitors of MCH2022. The CTF contains multiple beginner and intermediate challenges, and is also suited if you have never played a CTF before. It further contains on-site challenges which you can find in the CTF tent, where you can also get some help with the challenges or play together with other players. Check the map to see where you can find us on the campground and good luck in the CTF!
If there is any news during the CTF we will post it here, on Discord and on Twitter.
  • All challenges will be available during the MCH2022 event
  • Hacking the scoreboard or CTF environment is impressive, but rather use those hacking skills on the challenges
  • All flags will have the layout of flag{MD5} and are case insensitive
  • During the CTF the registration page will stay open for any teams who want to join after the CTF started
  • MCH2022 CTF is a Jeopardy style CTF, there is no need to set up VPN environment
  • There is no limit in the number of people participating per team. You only need one registration per team
  • Sharing flags or solutions is prohibited. This action is subject to disqualification
  • Attacking machines other than designated MCH2022 CTF machines is strictly prohibited
  • If you are sure that you have the valid flag but the system rejects it, please contact us
  • If you find any bug in the CTF environment, please report it to us
  • If you are not sure if something is a violation of the rules, ask us!
  • MCH2022 CTF will not contain any bonus points
  • Brute forcing against the MCH2022 CTF infra is not allowed
  • Using webscanners such as Nikto, Nessus or Dirbuster will not help you solve the challenges
  • If any cracking is needed this can be done well within an hour on a standard PC
  • There will be no Trivia questions or 4 hour Google recon sessions
  • There will be no hidden challenges
  • Contact us on Discord if you have questions
  • Discord server can be found here
  • Behave
  • No trolling please
  • Please do not post any spoilers / flags
  • Please do not post any ASCII art / useless links / memes
  • Feel free to request for help, but do not spoil challenge information in the channel
  • Although we are Dutch, the language spoken on Discord will be English