Programme and information
From preparation to the results announcement. Here you can find the day's schedule, an explanation of gameplay and on-site information.
Bosch AulaKandó Kálmán Kollégium
Budapest
In-person CTF · Teams of 3–4
The schedule is provisional. We will publish the final version by 6 November 2026.
Schedule
Arrive by so there is time for on-site registration and settling in before the opening.
All times are local to Budapest.
Find your team’s space and get your equipment ready.
After a shared welcome, we review the programme, access, important rules and how to ask for help.
A one-hour preparation phase, known as the grace period: you get to know and prepare your own Attack-Defense (AD) services. The network between teams is closed, and the Jeopardy challenges are not available yet.
The competition environment (range) opens, and the Jeopardy challenges become available. Play and scoring begin in both game modes.
Take turns to eat while your teammates stay in the game. Both formats and scoring continue without a pause.
Challenge solving, attack, defence and scoring continue.
Play and flag submission close. We total and check the results.
We present the final results, award the prizes and bring the day to a close together.
Gameplay
4 Jeopardy challenges and 4 Attack-Defense challenges. Divide the work: look for codes hidden in the challenges, known as flags, attack, and keep your own services running.
– · Grace period
This is for inspecting and patching the Attack-Defense services. The supplied PCAP files (recorded network traffic) let you get to know normal network traffic.
The network between teams is closed, and the Jeopardy challenges are not available yet.
– · Competition
At , the competition environment opens: the other teams' services become available to attack too. The Jeopardy challenges become available at the same time.
The two game modes run in parallel. Play and scoring continue through lunch.
4 challenges · Flag hunting
Solve the challenges and submit the flags you find for points.
4 challenges · Attack and defence
Capture flags from the other teams' services while fixing your own. Besides attacking, keeping your own services working counts too.
The competition rules also contain the scoring principles. We will explain the detailed point values at the opening technical briefing. You can read about the network, vulnbox and flag submission on the Technical information page.
– · Lunchtime
The organiser provides lunch. Team members take turns eating while play continues. In a team of four, for example, two can have lunch while two continue competing, then you can swap.
Both game modes, flag submission and scoring continue without interruption. Service availability counts during lunch too.
· Results announcement
At , play and flag submission close. We then check and total the results.
The results announcement and prize-giving start at . The day ends around .
Language and equipment
The competition is in person, with teams of 3–4 players and at most 20 teams taking part.
The challenge descriptions are in English, and on-site communication is in Hungarian. Each teammate needs their own laptop and charger; the organisers provide the network.
You can find the latest news on the website and the HoneyLab Discord.
Ask on Discord ↗