LUN4R CTF is a national-level Capture The Flag competition organized by ROOT RIET, bringing together cybersecurity enthusiasts for a two-stage challenge across web security, cryptography, binary exploitation, forensics, reverse engineering, OSINT and more.
Organized by ROOT RIET · Department of Computer Science & Engineering · Rajadhani Institute of Engineering and Technology (RIET), Thiruvananthapuram, Kerala.
From nation-wide qualifiers to on-site battleground.
20 September 2026
10:00 AM - 10:00 PM IST (12 Hours)
24 Challenges across Web, Crypto, Pwn, Forensics, Misc, Rev & OSINT.
Top 30 teams on the live dynamic scoreboard advance to the offline grand finals.
03 - 04 October 2026
03 Oct 11:00 AM - 04 Oct 11:00 AM IST (24 Hours)
Rajadhani Institute of Engineering and Technology (RIET)
Thiruvananthapuram, Kerala, India
Top 30 qualified teams battle live on dedicated local infrastructure for the ₹1,00,000 cash pool.
24 rigorously audited challenges spanning the offensive, defensive, and investigative cybersecurity landscape.
Modern web security flaws: authentication bypass, server-side request forgery, injection primitives, and API logic vulnerabilities.
Mathematical cryptanalysis: lattice reductions, weak RSA key generation, custom stream ciphers, and elliptic curve edge cases.
Binary exploitation: memory corruption, stack overflows, format string vulnerabilities, custom shellcode, and ROP chain fabrication.
Digital incident reconstruction: volatile memory dumps (Volatility), deep packet captures, raw disk images, and covert steganography.
Automation and algorithmic challenges: dynamic socket scripting, esoteric encodings, hardware logic analysis, and unconventional puzzles.
Reverse engineering: disassembly, decompilation (Ghidra/IDA), binary unpackers, anti-debugging mechanisms, and custom bytecode interpreters.
Open-source intelligence: public footprint analysis, reconnaissance across global registries, satellite imagery geolocation, and digital forensics trails.
Compete with elite cybersecurity teams and security researchers from colleges and universities across the entire country.
Test practical, field-applicable offensive and defensive security skills across 7 domains crafted by experienced CTF authors.
The top 30 qualifier teams earn an all-access invitation to converge at RIET, Thiruvananthapuram for a high-intensity on-site final.
Compete for the guaranteed ₹1,00,000 cash prize pool, partner vouchers, verified merit certificates, and industry recognition.
CASH PRIZE POOL
₹30,000 & Merit Certificates.
₹50,000 & National Accolades.
₹20,000 & Merit Certificates.
Special recognition vouchers, platform credits, cybersecurity course vouchers, and sponsor perks are awarded separately and are in addition to the ₹1,00,000 cash prize pool.
Registration is open and completely free on Unstop. Form your squad, review challenge rules, and prepare your tooling.
12 continuous hours of national-level CTF competition. Challenges across 7 domains with dynamic scoring on a live public scoreboard.
Write-up verification, anti-cheat telemetry validation, and formal announcement of the Top 30 teams advancing to the on-site finals.
03 Oct 11:00 AM - 04 Oct 11:00 AM (24 Hours). The Top 30 teams convene on-site at Rajadhani Institute of Engineering and Technology, Thiruvananthapuram for the high-stakes final battle and award ceremony.
Thiruvananthapuram, Kerala, India
Nestled among the green hills of Nedumparambu, Attingal, RIET boasts state-of-the-art computing laboratories and high-speed network infrastructure configured specifically for the LUN4R CTF offline finals battleground.
TRANSIT & CONNECTIVITY
LUN4R CTF 2026 is free to enter. Register your team on Unstop today and prove your mettle against India's best cybersecurity minds.
Interested in partnering with LUN4R?
Everything you need to know about participating in LUN4R CTF 2026.
LUN4R CTF is a national-level Capture The Flag competition open to cybersecurity enthusiasts, college and university students, and self-taught security researchers across India. Teams can register via the official Unstop portal.
Registration is completely free. There are no fees for the Round 01 online qualifiers. However there will be a fee of Rs.250 for the final round.
The Round 01 Online Qualifiers take place on 20 September 2026, starting at 10:00 AM IST and concluding at 10:00 PM IST.
The online qualifier runs continuously for 12 hours (10:00 AM to 10:00 PM IST).
The Top 30 teams on the qualifier leaderboard advance directly to the offline finals.
The Round 02 offline finals will take place on-site at Rajadhani Institute of Engineering and Technology (RIET), Attingal, Kerala from 03 October 11:00 AM to 04 October 11:00 AM IST (24 Hours).
The competition includes challenges across 7 domains: Web Security (4), Cryptography (3), Binary Exploitation/Pwn (3), Digital Forensics (4), Miscellaneous (4), Reverse Engineering (3), and Open Source Intelligence/OSINT (3).
The competition features a guaranteed ₹1,00,000 Cash Prize Pool. Additional partner vouchers, training credits, and physical rewards are provided separately from the cash pool for top performers.
Registration is managed through our official competition listing on Unstop: https://unstop.com/o/PQFKrlD. Team leads can create a team and invite members free of charge.