Capture the Flag

Step into the world where biology meets cybersecurity. The Biohacking Village CTF invites ethical hackers, researchers, students, and security professionals to engage in a hands-on competition simulating real-world medical and healthcare security challenges.

Participants will navigate complex puzzles and exploit simulations that reflect critical vulnerabilities found in medical devices, healthcare systems, and bioinformatics platforms. Whether you’re a seasoned red teamer or a curious newcomer, this CTF challenges your ability to think critically, work collaboratively, and push the boundaries of security in a high-stakes healthcare landscape.

What to Expect:

⚙️ Reverse engineering and binary exploitation
🔬 Bioinformatics and medical device protocol challenges
🏥 Healthcare infrastructure hacking scenarios
🔐 Cryptography, forensics, and threat analysis
🧩 Beginner to advanced challenges – everyone is welcome!

This CTF is more than just a game—it's a call to action for those who want to strengthen patient safety, improve device resilience, and explore the intersection of healthcare and technology.

2025 Capture the Flag Challenge

Code Crimson: A Biohacker’s Emergency

Something isn’t right. A renowned hospital system has gone eerily silent. Monitors flicker with unfamiliar code. Alarms no longer sound. The data that once saved lives is now locked behind walls of encryption, altered, erased, or rewritten. Whispers of a breach start rippling through the clinical silence. This isn’t just any system failure, this is deliberate and calculated. Something or someone has hidden a message inside the network. The kind of message that only the sharpest minds can extract. You are part of a premier response team, summoned under a rarely used protocol: Code Crimson.

Your mission is to enter the simulation, trace the unknown exploit, and secure critical medical infrastructure before the damage spreads. What you uncover may alter more than just files—it may change the future of healthcare. The pulse of the system is in your hands.

RULES

REGISTRATION

Participants may only register once for this challenge. If participants register for this challenge more than once, the whole teams with a participant that registered multiple times will be disqualified
By registering, participants agree that their accounts may be rejected or terminated and all submissions by them and/or their Team may be disqualified if any of the information in their account is incorrect.
Participants must agree to and abide by the Code of Conduct while participating in the Biohacking Village Capture the Flag. Anyone who will conduct themselves against the CoC will be eliminated from competition and banned forever

TEAMS

After participants register individually, they may work alone (team of one) or on one team with other challenge participants. To work on a team, they may either create a new team or join one that is pre-existing ( if a participant wishes to join a team or offer others to join, they can do so in the #ctf-st-elvis-teambuilding Discord Channel)
The maximum number of team members is five (5).
All teams must designate a Team Captain. A Team Captain serves as the official contact person for a team: this person should provide accurate and complete contact information to ensure that CTF organizers can reach their team if needed.
Each member of the team must be a registered participant in the CTF.
If participants choose to join a team, then they may not simultaneously participate as an individual or another team.

CHALLENGE SUBMISSIONS

All submissions must be received during the Challenge period. Submissions posted after the posted time frame will be disqualified.
Participants may get an answer but it will forfeit their points for that challenge. Even if the flag they tried before was similar. The decision to get the answer is final for zero points.

CHALLENGE SCORING

Each submission has set value known beforehand in the challenge description
The winning teams will be decided based on the number of the accumulated points during the CTF timeframe. In case two teams accumulate the same amount of points, the team that reached the amount of points in question faster will be the winner.

CHALLENGE DISQUALIFICATION

Whole team gets disqualified if any of the following applies:
- One or multiple team members have registered more than once
- One or multiple team members will not follow Code of Conduct (applies to any of the Biohacking village platforms or social media)
- Any offensive behaviour such as attacking the Biohacking Village infrastructure, denial of service, or escaping the boundaries set by the CTF or Device Lab environment

PRIVACY

Unless stated otherwise on the mainsite, we do not share any information about participants with anyone. Some events or conferences might have/require other rules, in that case it will be noted on the CTFd site.