BSIDES MUMBAI '26

# decrypting_invite :: where security meets the city of dreams

Register_Team →

Event Starts In

-- Days
-- Hours
-- Minutes
-- Seconds
# the movement
BSides Mumbai is an independent, community-driven, not-for-profit cybersecurity conference built by and for the security community. What began with a student CTF team grew into a larger community through DARKCTF, DARKCON, BSides Noida, and eventually BSides Mumbai. At its core, the journey has always been about creating a space where people can learn, experiment, share knowledge, and challenge themselves through hands-on security. The Capture The Flag (CTF) continues to be an important part of that journey. The BSides Mumbai 2026 CTF brings together students, cybersecurity enthusiasts, researchers, and professionals for a hands-on security competition focused on curiosity, creativity, technical knowledge, and problem-solving. Participants will encounter a variety of challenges that require careful analysis, investigation, experimentation, and the ability to approach problems from different perspectives. Whether participating individually or as part of a team, the CTF provides an opportunity to test existing skills, learn new techniques, collaborate with others, and engage with the wider cybersecurity community. We look forward to welcoming participants to the BSides Mumbai 2026 CTF
# rules_of_engagement
[ 01 ] platform_integrity Do not compromise, disrupt, or attempt to gain unauthorized access to the CTF infrastructure or platform. [ 02 ] automation Avoid automated scans or excessive automated requests that may negatively impact the CTF infrastructure or other participants. Tools and scripts may be used for solving challenges as long as they do not disrupt the competition. [ 03 ] challenge_issues If you encounter an issue with a challenge, report it through the official BSides Mumbai CTF Discord server using the designated ticketing system. The organizers and challenge authors will assist with resolving challenge-related issues. [ 04 ] no_soliciting Do not solicit flags, solutions, or direct answers from challenge authors, organizers, or other participants. [ 05 ] no_sharing Do not share flags, solutions, write-ups, hints, or any other challenge content with other teams during the active competition. [ 06 ] report_solicitation If another participant approaches you requesting flags, solutions, hints, or unauthorized assistance, document the interaction where possible and raise a ticket through the official CTF Discord server. Such reports are handled confidentially and appropriate action may be taken. [ 07 ] teams Solo participants and teams are both welcome. Teams may consist of a maximum of 4 participants. Only registered participants may compete on behalf of a team. [ 08 ] write_up All participating teams and solo participants are required to submit a brief write-up detailing their approach and solutions to the challenges they solved, using the official BSides Mumbai 2026 CTF write-up template provided by the organizers. Failure to submit the required write-up in the prescribed format may result in the participant or team being deemed ineligible for prizes. [ 09 ] no_flag_hoarding Flag hoarding is strictly prohibited. Do not intentionally collect, withhold, or retain flags for the purpose of preventing other participants from progressing. Any form of flag hoarding may result in immediate disqualification and removal from the CTF platform and associated event communities. [ 10 ] conduct Do not share or submit content that is discriminatory, hateful, abusive, or offensive towards individuals or groups based on characteristics such as race, color, religion, nationality, gender, or other protected characteristics. [ 11 ] organizer_discretion BSides Mumbai reserves the right to modify these rules, challenges, scoring, or competition procedures when necessary to maintain the security, fairness, and integrity of the CTF. ⚑ Failure to adhere to these guidelines may result in disqualification, removal from the competition, and forfeiture of eligibility for prizes. [ 12 ] happy_hacking Most importantly — engage in solving the challenges, learn something new, and enjoy the experience.

Cash prizes + CTF sponsor goodies (or equivalent amount).

26-27 Sept 2026

# powering the community

LANYARD — Altered Security

The BSides Mumbai 2026 CTF is a hands-on cybersecurity competition where participants solve challenges, investigate clues, identify vulnerabilities, and submit flags to earn points.

The CTF is open to anyone interested in cybersecurity and CTFs, subject to the event's eligibility requirements.

Solo participation is allowed.

Yes. Teams are allowed with a maximum of *4 participants per team*. All team members must be registered participants.

Event registration is handled through *MeraEvents*. Participants should complete their event registration through the official BSides Mumbai registration page on MeraEvents. *Registration:* https://meraevents.com/events/bsides-mumbai-2026/book

Yes. Participants must complete the required event registration before participating in the CTF.

After completing the required registration, participants will receive the necessary information to access the CTF platform and competition.

The *BSides Mumbai 2026 CTF is an online competition*. Participants can participate remotely through the designated CTF platform.

There is *one online CTF round*.

You will need: * A stable internet connection * A computer/laptop suitable for cybersecurity challenges * Your registered CTF account * Access to the official BSides Mumbai CTF Discord server

Yes. Participants may use appropriate tools, scripts, and automation to solve challenges, provided they do not disrupt the CTF infrastructure or negatively affect other participants.

Please report the issue through the *official BSides Mumbai CTF Discord server using the designated ticketing system*. The organizers or respective challenge authors will assist you.

Do not share the requested information. Please document the interaction where possible and *raise a ticket through the official CTF Discord server* so that the organizers can investigate it confidentially.

No. Flags, solutions, write-ups, hints, or other challenge content must not be shared with other participants or teams while the competition is active.

*All participating teams and solo participants are required to submit a brief write-up* detailing their approach and solutions to the challenges they solved. The write-up must be submitted using the *official BSides Mumbai 2026 CTF write-up template* provided by the organizers. Failure to submit the required write-up may result in the participant/team being deemed ineligible for prizes.

Official announcements, updates, and participant support will be provided through the *BSides Mumbai CTF Discord server*. Challenge-related issues should be raised through the designated ticketing system.

Winners will be determined based on their *CTF performance and submitted write-up*. The CTF score will be considered along with the quality, completeness, and accuracy of the submitted write-up. The organizers may also consider the submission/achievement time where required to resolve ties.

Violation of the rules may result in *disqualification, removal from the CTF platform and associated event communities, and forfeiture of prize eligibility*.

For official event information, registration details, schedules, and updates, refer to the official BSides Mumbai channels and the event registration page on *MeraEvents*.

For CTF-related questions or technical issues, please use the *ticketing system on the official BSides Mumbai CTF Discord server*. The organizing team will assist you there.

That's completely fine. The CTF is an opportunity to learn, experiment, and test your cybersecurity skills. Explore the challenges, work through the clues, and most importantly, *have fun hacking!*