Capture
The Flag
An international information security contest for university students. Exploit vulnerabilities, capture flags, and climb the leaderboard over 24 hours.
About
The Competition
The CAS 2026 CTF mobilises the knowledge and skills of university students in a controlled hacking environment. The objective is to develop practical abilities in information security, preparing the next generation of African cybersecurity specialists.
Format
How It Works
Teams solve challenges by exploiting vulnerabilities in web applications and operating systems within a limited time in a controlled data communication environment. Each captured flag — a unique hash string — earns points proportional to challenge difficulty.
Registration
Team Requirements
Eligibility
Competitors must be enrolled as undergraduate or master's level students at an accredited university.
Team Size
Maximum 4 members per team. One member acts as team leader for communication and coordination.
Certification
A faculty staff member must register the team and certify institutional affiliation.
Challenges
Required Knowledge Areas
- 01 OWASP Top 10 vulnerability identification and exploitation
- 02 Web application service and software version fingerprinting
- 03 Host operating system service enumeration
- 04 Vulnerability analysis for identified services and software
- 05 Public exploit identification for running services and software versions
Rules
Disqualification
The following actions result in immediate disqualification:
Full rules will be published on the CTF platform ahead of the contest.
Awarding
Scoring & Prizes
Results are evaluated by a panel of experts using quantifiable criteria. Prizes are awarded to the top-performing teams, who will publicly present their solutions.
Live Leaderboard
Points, rankings, remaining time, and competitor standings are visible to all teams throughout the contest.
Difficulty Scaling
Points per flag are proportional to challenge difficulty. Harder flags yield higher scores.
Tools Permitted
Any tool that aids challenge-solving is allowed, provided it does not affect CTF platform availability.
Winners Present
Top teams present their solutions publicly at Connected Africa Summit 2026.
Registration closes 17 April 2026
Ready to compete?
Form your team, secure your faculty certification, and register before the deadline. The contest runs online on 27 April — 24 hours on the clock.
Questions about the CTF contest? Contact cheruiyot.peter@icta.go.ke