LUNAR

CAPTURE THE FLAG

"THE NIGHT HIDES THE FLAG."

01 / Overview
Cybersecurity Competition

"THE FLAG IS HIDDEN.
THE NIGHT IS YOURS."

LUN4R CTF is a national-level Capture The Flag competition organized by ROOT RIET, bringing together cybersecurity enthusiasts for a two-stage challenge across web security, cryptography, binary exploitation, forensics, reverse engineering, OSINT and more.

Organized by ROOT RIET · Department of Computer Science & Engineering · Rajadhani Institute of Engineering and Technology (RIET), Thiruvananthapuram, Kerala.

0
Teams Registered
0
Challenges
0
Rounds
0
Finalist Teams
02 / The Two Rounds

Two Stages.
One Champion.

From nation-wide qualifiers to on-site battleground.

TOP 30 TEAMS ADVANCE TO OFFLINE FINALS
Stage 01

Online Qualifiers

Remote / Online
Date

20 September 2026

Time & Duration

10:00 AM - 10:00 PM IST (12 Hours)

Challenge Scope

24 Challenges across Web, Crypto, Pwn, Forensics, Misc, Rev & OSINT.

Progression Filter

Top 30 teams on the live dynamic scoreboard advance to the offline grand finals.

Stage 02

Offline Finals

On-Site Final
Date

03 - 04 October 2026

Time & Duration

03 Oct 11:00 AM - 04 Oct 11:00 AM IST (24 Hours)

Venue

Rajadhani Institute of Engineering and Technology (RIET)

Location

Thiruvananthapuram, Kerala, India

Finalist Pool

Top 30 qualified teams battle live on dedicated local infrastructure for the ₹1,00,000 cash pool.

03 / Challenge Domains

Seven Security Domains

24 rigorously audited challenges spanning the offensive, defensive, and investigative cybersecurity landscape.

TOTAL: 24 CHALLENGES (QUALIFIERS)

Web

Modern web security flaws: authentication bypass, server-side request forgery, injection primitives, and API logic vulnerabilities.

Crypto

Mathematical cryptanalysis: lattice reductions, weak RSA key generation, custom stream ciphers, and elliptic curve edge cases.

Pwn

Binary exploitation: memory corruption, stack overflows, format string vulnerabilities, custom shellcode, and ROP chain fabrication.

Forensics

Digital incident reconstruction: volatile memory dumps (Volatility), deep packet captures, raw disk images, and covert steganography.

Misc

Automation and algorithmic challenges: dynamic socket scripting, esoteric encodings, hardware logic analysis, and unconventional puzzles.

Rev

Reverse engineering: disassembly, decompilation (Ghidra/IDA), binary unpackers, anti-debugging mechanisms, and custom bytecode interpreters.

OSINT

Open-source intelligence: public footprint analysis, reconnaissance across global registries, satellite imagery geolocation, and digital forensics trails.

04 / Why Participate

ENGINEERED FOR SERIOUS PRACTITIONERS.

01

National-Level Competition

Compete with elite cybersecurity teams and security researchers from colleges and universities across the entire country.

02

Real Security Challenges

Test practical, field-applicable offensive and defensive security skills across 7 domains crafted by experienced CTF authors.

03

Offline Finals

The top 30 qualifier teams earn an all-access invitation to converge at RIET, Thiruvananthapuram for a high-intensity on-site final.

04

Recognition & Rewards

Compete for the guaranteed ₹1,00,000 cash prize pool, partner vouchers, verified merit certificates, and industry recognition.

05 / Prize Pool
GUARANTEED CASH AWARDS
₹1,00,000

CASH PRIZE POOL

RUNNER-UP · 2ND

Cash Award

₹30,000 & Merit Certificates.

CHAMPION · 1ST PLACE

Grand Cash Prize

₹50,000 & National Accolades.

2ND RUNNER-UP · 3RD

Cash Award

₹20,000 & Merit Certificates.

+ ADDITIONAL VOUCHERS & REWARDS

Special recognition vouchers, platform credits, cybersecurity course vouchers, and sponsor perks are awarded separately and are in addition to the ₹1,00,000 cash prize pool.

06 / Official Timeline

COMPETITION ROADMAP

REGISTRATION OPEN

Team Registration Live

Registration is open and completely free on Unstop. Form your squad, review challenge rules, and prepare your tooling.

20 SEP 2026 · 10:00 AM - 10:00 PM

Round 01: Online Qualifiers

12 continuous hours of national-level CTF competition. Challenges across 7 domains with dynamic scoring on a live public scoreboard.

AFTER QUALIFIERS

Qualifier Results & Top 30 Announcement

Write-up verification, anti-cheat telemetry validation, and formal announcement of the Top 30 teams advancing to the on-site finals.

03 - 04 OCT 2026

Round 02: Offline Finals

03 Oct 11:00 AM - 04 Oct 11:00 AM (24 Hours). The Top 30 teams convene on-site at Rajadhani Institute of Engineering and Technology, Thiruvananthapuram for the high-stakes final battle and award ceremony.

07 / Offline Finals Venue
OFFLINE FINALS · 03-04 OCTOBER 2026 (24H)

Rajadhani Institute of Engineering & Technology

Thiruvananthapuram, Kerala, India

Nestled among the green hills of Nedumparambu, Attingal, RIET boasts state-of-the-art computing laboratories and high-speed network infrastructure configured specifically for the LUN4R CTF offline finals battleground.

TRANSIT & CONNECTIVITY
AIRPORT (TRV)
~34 km
Trivandrum International
RAILWAY (VAK)
~19 km
Varkala Sivagiri Station
CENTRAL RAIL (TVC)
~32 km
Trivandrum Central
BUS TERMINAL
~6.5 km
Attingal KSRTC Terminal
Open In Google Maps
Rajadhani Institute of Engineering and Technology Campus, Thiruvananthapuram
RIET CAMPUS
08°44'21.7" N · 76°49'57.3" E
THIRUVANANTHAPURAM, KERALA
ELEVATION +85M MSL
SECTOR ZONE-KL-01
INFRASTRUCTURE 8th Floor Auditorium
CAPACITY TOP 30 TEAMS
NATIONAL LEVEL CAPTURE THE FLAG

READY TO FIND
THE FLAG?

LUN4R CTF 2026 is free to enter. Register your team on Unstop today and prove your mettle against India's best cybersecurity minds.

REGISTER NOW
0 TEAMS ALREADY REGISTERED · ENTRY FREE
08 / Partners

POWERED BY THE COMMUNITY

Interested in partnering with LUN4R?

09 / FAQ

Frequently Asked Questions

Everything you need to know about participating in LUN4R CTF 2026.

LUN4R CTF is a national-level Capture The Flag competition open to cybersecurity enthusiasts, college and university students, and self-taught security researchers across India. Teams can register via the official Unstop portal.

Registration is completely free. There are no fees for the Round 01 online qualifiers. However there will be a fee of Rs.250 for the final round.

The Round 01 Online Qualifiers take place on 20 September 2026, starting at 10:00 AM IST and concluding at 10:00 PM IST.

The online qualifier runs continuously for 12 hours (10:00 AM to 10:00 PM IST).

The Top 30 teams on the qualifier leaderboard advance directly to the offline finals.

The Round 02 offline finals will take place on-site at Rajadhani Institute of Engineering and Technology (RIET), Attingal, Kerala from 03 October 11:00 AM to 04 October 11:00 AM IST (24 Hours).

The competition includes challenges across 7 domains: Web Security (4), Cryptography (3), Binary Exploitation/Pwn (3), Digital Forensics (4), Miscellaneous (4), Reverse Engineering (3), and Open Source Intelligence/OSINT (3).

The competition features a guaranteed ₹1,00,000 Cash Prize Pool. Additional partner vouchers, training credits, and physical rewards are provided separately from the cash pool for top performers.

Registration is managed through our official competition listing on Unstop: https://unstop.com/o/PQFKrlD. Team leads can create a team and invite members free of charge.