What is CTF?

CTF or Capture-the-Flag is a competition specific to cybersecurity, challenging contestants to solve puzzle-like challenges with varying difficulties and categories from forensics, web, reverse engineering, pwn, programming, etc. In each challenge, a string of text is hidden well that can be uncovered by solving that specific challenge, submitting the flag to the CTF platform grants points, the highest pointer wins.

My History with CTF

The first encounter I had with CTF was not actually CTF but rather an internet mystery called Cicada 3301. It is a mysterious post from 4chan that is looking for 'highly-intelligent individuals' and solving it involves cryptic 'puzzle'-like challenges. I tried replicating their challenges back in 2019 because I thought it was cool.

Around 2021, I watched the movie 'Snowden', and was really curious what hacking is all about. I first looked up networking tutorials online, then installed Kali Linux on a flashdrive. I tinkered with it for a bit and tried different training sites such as: Hackthissite, Blueteamlabs, and others until I discovered TryHackMe and my experience skyrocketed. Fast forward to 2023, I heard about the annual Hack4Gov (a university CTF) by DICT here in the Philippines, and as a university freshmen, contacted my professor and asked if our campus wanted to participate. It turns out our campus had participated a year before. I was lucky that my professor willingly admitted me to the team as the third member out of four.

With little preparation of only 2 weeks, our team A1SBERG represented our campus, from 7th place last year we were able to reach 4th place, and only 50 pts away from stealing the 2nd place. A big disappointment, I thought, and said better luck next time.

It did not end there. I was announced the wildcard or the individual that gets a second chance for redemption in the Finals round of Hack4Gov. We still went home as champions for us.

A few months of rest, and we were informed that Trend Micro Careers will hold an online CTF. Without hesitation, we assembled A1SBERG again with a new member replacement: my department organization's president. It was holiday so the school was closed, but with our campus' director's support, he let us borrow our coach's office. We battled with around 180 teams in the Philippines and after fighting to be in the Top 10, we emerged Top 5, earning us the slot in the Finals. A few days and the campus director gave us the go signal to borrow the office again. Trend Micro Careers increased the Finals participants to 30 teams as all of us had the same scores with only small submission time differences. I wrote "Do Not Disturb: Champions in progress" in a piece of paper I sticked on the office door. When the event ended we only got to Top 15.

Fast forward a few more months, and the Finals for the Hack4Gov came. I became part of a new team named shellShocked(); formed by wildcard players from different regions. I'm so glad I met my team as we became buddies almost instantly. I even recall the day after the finals, where I saw them watching Spongebob on the hotel room TV, thinking: "yep, this is what hackers watch".

Our team secured 1st Place on the Hack4Gov, with the help of our team leader and also a very smart person who was the highest-pointer of the finals.

It was then I decided that I want to participate more.

Expected skills in CTF

• Basic Computer Skills
• Computer Programming
• Forensic analysis
• Computer Networking
• Cryptography
• Ethical hacking
• ... etc