Build
Complete Call for Challenges form to build AppSec challenges.
Your submission will be reviewed and approved challenges will be included in the contest.
Best contributed challenges will receive prizes.
SecDim is the official host for the AppSec Village Wargame Contest at DEFCON 34 Unlike a typical CTF, the contestants get a score when they successfully remediate a security vulnerability. Challenge yourself in this AppSec contest or build an AppSec challenge to win prizes.
Contest has not started but you can submit your challenges.
Complete Call for Challenges form to build AppSec challenges.
Your submission will be reviewed and approved challenges will be included in the contest.
Best contributed challenges will receive prizes.
This is a hybrid contest by AppSec Village at DEFCON 34 for anyone interested to challenge themselves in AppSec.
We have a novel Attack and Defence styled CTF game.
We have handpicked secure coding challenges based on real world incidents.
Your objective is to
exploit fix
security
vulnerabilities
in each challenge.
This event spans 2.5 days, from 10 AM - 6 PM PDT on August 7-9, and 10-11:45 AM PDT on August 10.
The Award Ceremony will be held at 11:50 AM PDT in the AppSec Village on August 9.
The game will be available online for the whole duration specified.
Checkout AppSec Village CtF page for details on prizes
There will be prizes for the winner and runner ups!
So what are you waiting for?
You can solve the Start Here challenge to get started.
Use SecDim SDK to build AppSec challenges. . Your submission will be reviewed and approved challenges will be included in the contest. Best contributed challenges will receive prizes.
This is an individual exercise to skill up so we recommend playing solo.
SecDim Discuss , if you are stuck or have any questions, feel free to ask. There are no dumb questions.
There is a dedicated Chat server , ask your questions here.
Follow us on @secdim to stay up to date.
Sabotaging other players, attacking the platform, DoS, DDoS, cheating, attempts to disclose security tests on the server will all result in an immediate ban. Lets learn, share and compete fairly and nicely.
There will be multiple winners. The player with the highest total points by the end of the event and the player who has the best contributed challenge.
Python, Javascript, Go, C, Java, Solidity, Docker, Typescript, GraphQL, OpenAPI, Kubernetes, AWS, Terraform, and more.