SilverHill - Attack/Defense CTF Competition, Evently

SilverHill is an offline Attack & Defense Capture The Flag (CTF) organised by d4rkc0de, IIIT-Delhi , under ESYA 2026 . Teams will simultaneously attack opponents' vulnerable services and defend their own infrastructure by identifying, exploiting and patching vulnerabilities while maintaining service availability. Bring Your Own Laptops!! (Suggestion: bring as many as possible)

Date: 14

November 2026 Time: 12:00pm to 5:00pm

Mode: Offline, Team-based

Competition Venue: C11, Old Academic, IIITD Eligibility &

Registration Guidelines

Target Audience: Anyone interested in cybersecurity and CTFs.

Inter-College Teams: Allowed.

Inter-Specialization Teams: Allowed; participants from different branches and years may form a team.

Team Size: 6 people max

Prerequisites: Basic understanding of cybersecurity, networking and computer systems is recommended.

Competition Format

Format: Offline Attack & Defense CTF.

Infrastructure: Teams will receive isolated environments containing vulnerable services.

Objective: Attack other teams' services while protecting and maintaining your own.

Scoring: Points will be awarded based on successful attacks and service availability/defence.

Monitoring: Automated service monitoring and scoring will be used.

Number of Services/Challenges: To be announced during event.

Duration: To be announced.

Skills & Areas Covered: Participants may encounter challenges involving: Web Security, Binary & System Security, Network Security, Vulnerability Research, Exploitation, Defensive Security. Rules &

Code of Conduct: Teams may attack only the assigned competition infrastructure of other participating teams. Attacking the college network, competition infrastructure, organiser systems or any external infrastructure is strictly prohibited. Do not launch DoS/DDoS attacks against the competition infrastructure. Teams must defend and maintain the availability of their own assigned services. Sharing flags, credentials, exploits or competition-sensitive information with other teams is prohibited unless explicitly permitted. Attempts to manipulate the scoring system, monitoring system or competition infrastructure are prohibited. Any vulnerability discovered in the underlying competition infrastructure must be reported to the organisers. Organisers reserve the right to disqualify teams violating competition rules. The organisers' decisions regarding scoring, disputes and disqualifications will be final.