Ghost in the Shellcode is an annual capture-the-flag contest that takes place every winter -- generally in January, but sometimes in February. The contest is hosted live from the ShmooCon Hacker Convention in Washington, DC. Since 2012, the contest has been available online to all competitors as well as in person at ShmooCon.

Next Contest

Ghost in the Shellcode VI - January 16-18, 2015

News

14 December 2014
This year's teaser is over! Congratulations to PPP! Final scores are available here. The archived teaser round is available here.

13 December 2014
2015 Teaser is live!

12 December 2014
Ghost in the Shellcode 2015 was announced as one of the 6 pre-qualifying events for the Defcon 23 CTF Finals. This is the third year we've been a pre-qualifier!

Contest Details

Ghost in the Shellcode is a jeopardy-style capture-the-flag competition. The contest features many pwnables, binary reverse engineering, and crypto challenges. Sometimes all at once. We've been known to release forensics, networking, and web guessing challenges as well, but those aren't guaranteed. You should also expect some mild-emulator development, alternate-architecture exploitation, and shellcoding challenges.

Some details about Ghost in the Shellcode:

Choose Your Pwn Adventure 2

For our fifth year (in January 2014), we released Choose Your Pwn Adventure 2. A custom 3D MMOFPS based on the Unity game engine. The game included several quests that were only solvable by modifying the game client.

Client downloads for Choose Your Pwn Adventure 2 are here: Windows - Mac - Linux
Server binaries for Choose Your Pwn Adventure 2 are here so you can run your own!

Several write-ups exist: 1, 2, 3, 4. 2015 will be even more impressive.

Teaser

Originally called the Warmup, the Ghost in the Shell Teaser round is an short contest that runs each year between the last ShmooCon ticket sale and the conference itself. The winner of the teaser is awarded at least 1 sold-out ShmooCon ticket.

The Teaser round's details differ slightly from other contests:

The teaser round generally runs for between 12 and 24 hours. Like all GitS contests, there is no pre-registration.

Participation in the teaser is not required to participate in the full competition. They are completely separate.

Contact

Follow us on Twitter @ShellGhostCode

Contact us on irc: irc.freenode.net #gits-ctf

Archive