RECON
Map the exposed surface, enumerate services, and turn scattered information into a usable attack plan.
← All challenges
HACK.
Recon the environment, exploit weaknesses, establish access, pivot across systems, and escalate privileges as your team pursues scored objectives.
01 / OVERVIEWFIND A WAY
HACK THE NETWORK
FIND A WAY
IN. THEN
GO DEEPER.
This is a continuous two-day Red Team challenge built around a realistic enterprise network. Teams begin with limited knowledge and must turn reconnaissance into access, access into control, and control into completed objectives.
The network rewards disciplined methodology. Scanning alone will not be enough. Teams must interpret clues, chain weaknesses, manage access, and document results.
ONE NETWORK.
MULTIPLE PATHS.
EXPLOIT
Identify viable weaknesses and gain an initial foothold without wasting time on dead ends.
ESTABLISH
Stabilize access, collect evidence, and understand the role of the compromised system.
PIVOT
Use discovered trust and network paths to reach internal services and new segments.
ESCALATE
Find credential, configuration, and permission weaknesses that unlock higher-value access.
CAPTURE
Complete objectives, submit proof, and preserve enough detail to explain the path your team took.
03 / ENVIRONMENTEXTERNAL
EXTERNAL
TO INTERNAL.
- Internet-facing web and network services
- Internal enterprise systems
- Windows, Linux, and identity infrastructure
- Credentials, trust relationships, and lateral movement paths
- Multiple objectives with different levels of difficulty
HOW SCORING WORKS
Teams earn points for validated objectives and required proof. Higher-value objectives may require deeper access or a multi-step attack path. Final flag rules, evidence requirements, prohibited actions, and tie-break rules will be published before the event.
- Submit only evidence your team obtained
- Stay within the authorized competition environment
- Do not attack infrastructure used to run or score the event
- Follow all rules for collaboration and tool usage
04 / PREPAREBUILD YOUR
BUILD YOUR
METHOD.
Practice network and web enumeration, Linux and Windows privilege escalation, credential discovery, Active Directory fundamentals, pivoting, note-taking, and evidence capture.
Bring a repeatable workflow. Assign roles within the team, keep shared notes, record commands that matter, and know when to move on from an unproductive path.
Bootcamp information →SEPTEMBER 18–19 · ADDIS ABABA