🚩 BSidesTLV CTF 2026
Capture The Flag

Welcome to the official CTF arena of the BSidesTLV conference!

The BSidesTLV Capture The Flag competition is a unique community event, built by the community for the community.

The primary goal of the competition is to bring people together, create face-to-face interactions, and provide an open platform for participants of all skill levels—from beginners taking their first steps in cybersecurity to experienced researchers and developers. The competition is a great opportunity to experiment, learn new techniques, work together in teams, and solve challenges in an empowering and educational atmosphere.

📅 Schedule & Format

This year, the competition features both local (On-Site) and remote (Online) challenges!

Local CTF

Format: Local Jeopardy CTF (solving physical and digital challenges in the conference arena).
Location: CTF Area at the 1st floor gallery of the BSidesTLV conference.
Competition Day: Conference Day | 11.11.2026.
Hours: From 09:00 AM to 15:30.

Remote CTF

Location: Online CTF.
Competition Day: Before Conference Day | 8-10.11.2026.
Hours: Starting 08/11 at 08:00, Closing at 10/11 at 22:00.

Team up !

You can participate solo or in teams (working together is highly recommended!).

🧩 Challenge Categories

This year, we placed a special emphasis on hardware challenges and local physical challenges!

The BSidesTLV CTF team has prepared a variety of challenges, some of which will require physical access to equipment, working with hardware, and interaction within the CTF area:

🛠️ Hardware & Embedded Security (Special focus this year!): On-site physical hardware challenges, analyzing hardware communication protocols (UART, SPI, I2C), working with microcontrollers and electronic components, and firmware reverse engineering.
📍 On-Site & Physical Challenges: Puzzles and challenges requiring physical presence and interaction in the conference area.
🌐 Web Exploitation: Web application vulnerabilities, Injection, XSS, SSRF, and more.
🔍 Reverse Engineering & Pwn: Binary file analysis, software reverse engineering, memory corruption, and exploitation.
🔐 Cryptography & Forensics: Cracking ciphers, analyzing files, memory dumps, and network traffic.
🤖 AI Security: Prompt Injection challenges and exploiting vulnerabilities in AI models and agents.
🧩 Misc & OSINT: Logic puzzles, open-source intelligence investigations, and various community challenges.

🏆 Prizes

We have prizes for both Local and Remote CTF, but only onsite participants attending the conference can collect their prizes.

Since AI today can probably solve a lot of challenges, this year we decided to change our prizes from the conventional method to encourage community participation locally

Players will also be awarded participation tokens, the type and amount of prizes depend on conference sponsorships and budget allocations.

Please note:

only onsite participants who are present at the conference can collect their prizes!
Players will also be awarded participation tokens (limited number) as part of encouraging community engagement.

Winners Announcement & Award Ceremony

Winner Annoncement and first places Prize distribution will take place physically during the closing ceremony of the conference.
This years prizes will be symbolic
- 🥇 1st Place: [TBD]
- 🥈 2nd Place: [TBD]
- 🥉 3rd Place: [TBD]
- 🎁 Special Awards (Write-up & Community Award): Additional prizes might be awarded for exceptionally creative solutions, inspiring teamwork, and solving complex hardware challenges in the arena. [TBD]

📜 Terms & Competition Rules

To keep the competition fair, fun, and safe for everyone, all participants must adhere to the following rules:

Flag Format: The official flag format is BSidesTLV{...} (unless stated otherwise in the challenge description).
No Solution Sharing: Sharing flags or solutions between different teams is strictly prohibited. The goal of the competition is self/team learning and hands-on experience.
Respect Hardware Equipment: Local and hardware challenges in the arena include delicate physical equipment. Treat the equipment with care and respect, and do not cause irreversible physical damage.
Communication & Infrastructure: Do not attack the CTF infrastructure, scoreboard system, or conference network. Attack only the components and addresses explicitly designated as part of the challenges.
Community Fairness: Competition admins reserve the right to disqualify any team or participant who violates the rules or acts unfairly.

🤝 Code of Conduct

The BSidesTLV community is built on mutual respect, collaboration, mutual help, and accessible learning.

Respectful & Inclusive Environment: The competition is designed to be a safe and welcoming environment for everyone—from beginners to professionals. We have zero tolerance for disrespect, harassment, or inappropriate behavior.
Mutual Support: Help other participants whenever possible (without giving direct solutions!), share knowledge, and make new connections.
Reporting: If you encounter inappropriate behavior in the CTF arena, please immediately inform one of the CTF Admins on-site.

CTFd Platform

How to sign up for the Remote CTF ?

Join the BSidesTLV CTF we will update with CTF information.

Nofar T.

CTF Leader

Lavie B.B.

CTF Leader

Rotem R.

CTF Support

Rain G.

Hardware Lead

❓ Frequently Asked Questions (FAQ)

1. Who can participate in the competition?

Evvvveryone! The competition is community-driven and designed for all skill levels. Whether you are students, pupils, hobbyists, developers, or experienced security professionals—there are challenges tailored specifically for you. Everyone can participate in the Remote CTF, while the Local CTF is open to all onsite conference participants.

2. When will the CTF take place?

Local CTF:

On the day of the conference (11.11.2026) from 09:00 to 15:30.

Remote CTF:

Before the conference day (8-10.11.2026), starting on 08/11 at 08:00 AM and closing on 10/11 at 22:00 PM. (Note: Remote challenges will remain active for a few days after the event, but the scoreboard will stop accepting new submissions for points).

3. What should we bring to the local CTF?

A charged laptop (with its charger!), a working environment you like (such as a Kali/Ubuntu virtual machine), network cables/Wi-Fi, phone, pen & paper if needed, and plenty of curiosity and motivation! We will provide all the electronics and hardware equipment in the arena, as well as shared power outlets.

4. Do we have to compete as a team, and how many people can be in a team?

Not at all! You can come alone, play solo, or connect with new people at the CTF arena on the day of the conference to form spontaneous teams. There is no limit on team size; however, for winning teams, prizes will be awarded to up to the first 5 members.

5. Are there prizes?

Yes! We have prizes for both Local and Remote CTF, but only onsite participants attending the conference can collect their prizes.