7 months ago

Public voting is now open

It's your turn to pick the Popular Choice award winner! Browse 'HTS 2k25-Hack The Shield' submission gallery, click on your favorite, and vote. Be sure to spread the word via your social networks, too!

Please note, as per the Devpost terms of service, you may not tamper with the vote process through manual or automated means, or attempt to compensate voters, at risk of disqualification. Find out more about public voting here.

Questions?

If you have any questions about the hackathon, please post on the discussion forum.

7 months ago

🔥 ROUND:03 Mini Project: “Build & Secure a Vulnerable App”

⏳ Duration: 2 Days 🎯 Goal

Teams will build a small web app, intentionally add real bug bounty vulnerabilities, exploit them, and then fix them.

Required Vulnerabilities

Your app must include at least:

  1. IDOR

  2. Broken Access Control

  3. XSS (stored or reflected)

  4. Insecure File Upload

Bonus (optional):

  • Weak JWT secret

  • Sensitive data leak

  • CSRF

Required Submission

Teams must submit all of the following:

  • Vulnerable Version (Before Fix) —> the intentionally vulnerable app.

  • Secure Version (After Fix) —> patched & secured app.

  • Bug Bounty Report (Mandatory) —> a professional report including:

    • Bug Title

    • Vulnerability Type (IDOR/XSS/etc.)

    • Severity

    • Steps to…

Read more

7 months ago

Round 02 Begins 🔥 ( Operation: Broken Web )

Operation: Broken Web

BlackHaze has breached Rivertown’s Web Command Core and left 4 vulnerable entry points.
Your mission: Exploit them, capture the flags, restore the system.

TARGETS

🟦 IDOR Breach — Access restricted profile & extract token.
Difficulty: ★★☆☆

🟩 XSS Injection — Trigger redirect using JS payload.
Difficulty: ★★☆☆

🟥 SQLi Bypass — Break login via SQL manipulation.
Difficulty: ★★★☆

🟪 Admin Takeover — Find & breach hidden admin panel.
Difficulty: ★★★★

Dive Into Operation: BrokenWeb

7 months ago

Round 01 Begins 🔥 ( City of Shadows 🎩)

Rivertown is under Rocky’s control. Your mission: find the 9 hidden flags in the dataset below and submit them with your team info
📂 Download The Dataset Find 9 Flags: Click Here
✅ Everything is safe. Explore, investigate, and capture the flags!

Format:
1. FLAG-01  
2. FLAG-02  
…  
9. FLAG-09  

Team Name:  
Members:  
Email:  
The city waits. Only you can topple Rocky. Good luck!