ABYCTF: Sovereign Cyber Range & CTF Arena
Ethiopia’s sovereign cybersecurity training range and capture-the-flag arena featuring live Jeopardy challenges, dynamic attack-defense battlegrounds, and automated binary exploitation sandboxes.
Active Range Targets & Flag Verification
Obelisk Buffer Smashing
Smash the stack on an ARM64 microservice binary to hijack the return instruction pointer and pivot into a ROP gadget chain bypassing ASLR & stack canary.
Season 2026 Sovereign Standings
| RANK | TEAM DESIGNATION | AFFILIATION / ACADEMY | FLAGS CAPTURED | TOTAL POINTS |
|---|---|---|---|---|
| #1 | Addis Ababa Tech RedTeam | AAU HiLCoE / AAU Tech | 38 solves | 14,250 PTS |
| #2 | Bishoftu Sovereign Defense Cohort | Defense University | 35 solves | 13,400 PTS |
| #3 | Hawassa Cryptographic Enclave | Hawassa University | 31 solves | 11,800 PTS |
| #4 | Bahir Dar Citadel Hackers | Bahir Dar Institute of Tech | 28 solves | 10,450 PTS |
| #5 | Mekelle Binary PWN Collective | Mekelle Institute of Tech | 24 solves | 9,100 PTS |
Engineered for Real-World Practitioners
Dynamic Attack-Defense Arena
High-Stakes Live Red vs Blue BattlegroundsTeams defend vulnerable sovereign service nodes while simultaneously auditing, weaponizing, and firing zero-day exploits into competing enemy server towers in real time.
Ephemeral Containerized Sandboxes
Isolated MicroVM Environments per ChallengerEvery challenger receives a dedicated, kernel-isolated Firecracker microVM instance with gRPC health-checking and dynamic root flag rotation.
Low-Level Binary Exploitation
Real-World Architectures (ARM64, x86_64, RISC-V)No web-quiz fluff. Challenges simulate actual operational scenarios: kernel driver heap corruptions, SCADA PLC protocol exploits, and hypervisor breakouts.
Real-Time Telemetry & Scoring Engine
Cryptographic Anti-Cheat Flag VerificationZero-knowledge HMAC validation prevents flag sharing. Automated SLA checks test the availability of contested services every 60 seconds.