top of page
  • mastodonlogo_edited
  • X
  • LinkedIn
  • Youtube
  • Instagram
  • Blue Sky Logo_edited
Biohacking Village
Capture the Flag Biohacking Village

Capture the Flag

 

Participants will navigate complex puzzles and exploit simulations that reflect critical vulnerabilities found in medical devices, healthcare systems, and bioinformatics platforms. Whether you’re a seasoned red teamer or a curious newcomer, this CTF challenges your ability to think critically, work collaboratively, and push the boundaries of security in a high-stakes healthcare landscape.

What to Expect:

  • ⚙️ Reverse engineering and binary exploitation

  • 🔬 Bioinformatics and medical device protocol challenges

  • 🏥 Healthcare infrastructure hacking scenarios

  • 🔐 Cryptography, forensics, and threat analysis

  • 🧩 Beginner to advanced challenges – everyone is welcome!

This CTF is more than just a game—it's a call to action for those who want to strengthen patient safety, improve device resilience, and explore the intersection of healthcare and technology.

2025 Capture the Flag Challenge 

Code Crimson: A Biohacker’s Emergency

Hackwell Heights_edited_edited.jpg

Something isn’t right...  

Hackwell Heights Medical Center, a naval hospital, has been thrust into chaos. A highly skilled spy has infiltrated the hospital's cybersecurity defenses, stealing sensitive patient information and threatening the lives of those under its care. As the hospital teeters on the brink of catastrophe, it’s up to you and your team to track down the intruder, uncover their methods, and stop the devastating chain of attacks before it’s too late. 

code crimson_edited.png

Will you rise to the challenge and secure the future of Hackwell Heights Medical Center, or will the spy vanish with secrets that could endanger countless lives?

 

Join the Biohacking Village CTF and prove your skills in Code Crimson: A Biohackers Emergency.

Official Rules

🔐 REGISTRATION

  • Participants may register only once. Duplicate registrations under alternate names, emails, or aliases will result in immediate disqualification of the entire team.

  • A valid and verifiable email is required. Disposable or temporary emails may result in account rejection.

  • By registering, participants agree that any inaccurate or misleading information may result in disqualification and account deactivation.

  • Participants must adhere to the Biohacking Village Code of Conduct. Violators will be disqualified and banned from all future BHV events.

👥 TEAMS

  • Teams may consist of 1 to 5 participants.

  • Team formation may occur before the competition begins. Once the CTF starts, no changes to team rosters are allowed.

  • Team coordination and formation can occur in the Discord channel: #ctf-teambuilding.

  • Each team must designate a Team Captain who will serve as the primary point of contact with event organizers.

  • Each participant may only be on one team. Dual participation is strictly forbidden.

 

📥 CHALLENGE SUBMISSIONS

  • All submissions must be made during the official competition window. Late submissions will not be counted.

  • For hardware-based or physical challenges, do not tamper with shared equipment, intentionally lock out others, or bypass provided access controls. Violations may lead to disqualification.

  • Infrastructure concerns should be reported promptly in the Discord #ctf-support channel.

  • Flags may only be discussed or shared within your registered team. Sharing flags or answers with anyone outside your team — including via Discord DMs, social media, or public forums — is strictly prohibited and may result in disqualification of all participants involved.

 

🧮 SCORING

  • Each challenge has a fixed point value, listed in the challenge description.

  • The winning team is the one with the highest total score within the CTF window.

  • In the event of a tie, the winner will be the team that reached their final score first (based on submission timestamps).

  • TryHackMe's team scoring mode will serve as the official scoreboard.

 

⛔ DISQUALIFICATION CONDITIONS

A team will be disqualified if any of the following occur:

  • Any team member registers more than once or uses an alternate identity.

  • Any team member violates the Code of Conduct, either on-site or in official online spaces (e.g., Discord).

  • Any team member shares or discusses flags or solutions outside their registered team, including via Discord DMs, social media, or public forums.

  • Any attempt is made to:

    • Attack or disrupt event infrastructure beyond the intended challenge scope.

    • Perform denial of service, interfere with other teams, or impair access to shared resources.

    • Escape or tamper with sandboxed environments.

  • Any tampering with physical or virtual challenge systems not intended by the organizers.

 

🔒 PRIVACY

  • The Biohacking Village does not share participant data beyond what is necessary to administer the competition and issue awards.

  • No information will be sold or reused outside of Biohacking Village communications.

  • If this CTF is hosted in collaboration with another event, additional policies may apply and will be disclosed in advance.

  • Participants may request the removal of their data from Biohacking Village systems after the event via the official contact channel.

  • Please note: Biohacking Village does not control or manage participant data policies for TryHackMe. For information on how TryHackMe handles personal data, please refer to their official Privacy Policy.

bottom of page