Hack the Box

Hack the Box is an ethical hacking competition where participants exploit deliberately vulnerable virtual machines under strict time limits. The event simulates real-world penetration testing challenges: reconnaissance, vulnerability discovery, exploitation, and privilege escalation. Competitors aim to gain root access, document their methodologies, and demonstrate both technical mastery and resilience under pressure.

Beyond the race, Hack the Box cultivates critical cybersecurity skills, persistence, and professional reporting practices essential in the digital era.

Registration Process

• Individual participation only (1 participant per team).
• Registrations must be completed on the official Saturnalia registration platform before the specified deadline.
• Only confirmed participants will be allowed to compete.
• Registration Fees: To be decided by the organizing committee.

Rules & Regulations

• Participation is open to currently enrolled students of the hosting institution.
• Cross-college entries are not permitted unless explicitly approved by the organizers.
• Each participant will be assigned a dedicated vulnerable virtual machine to exploit.
• The use of pre-written exploits or automated tools is allowed only if they are publicly available and not malicious beyond the scope of the competition.
• Internet usage is restricted to exploit research, documentation, and official resources provided by organizers.
• Participants must not attempt to interfere with, attack, or disrupt other participants’ machines, the competition infrastructure, or the event network.
• Real-time documentation (notes, screenshots, steps) is mandatory. Final reports must highlight methodology, key findings, and mitigation strategies.
• The primary objective is privilege escalation to root access and successful capture of the final flag.
• In case multiple participants reach the final flag, the tie will be broken based on documentation quality and speed of completion.
• Any attempt to cheat, sabotage, or violate the ethical guidelines of the event will result in immediate disqualification.
• Respectful conduct is mandatory. Harassment, disruptive behavior, or unsportsmanlike conduct will lead to removal.
• Organizers reserve the right to change rules or disqualify participants if deemed necessary.

Judging Criteria

• Successful root access and flag capture
• Speed of exploitation and completion
• Clarity, structure, and thoroughness of documentation
• Depth of vulnerability analysis and mitigation proposals
• Ethical conduct and adherence to competition rules

Terms & Conditions

By participating in this competition, you agree to comply with all rules and ethical guidelines outlined above.

• The organizing committee reserves the right to amend results in exceptional cases and disqualify participants in violation of rules.
• The event may be modified, postponed, or canceled due to unforeseen circumstances.
• Prize amounts are subject to change prior to the final round.
• Organizers bear no responsibility for delays, cancellations, or technical failures beyond their control.
• All disputes will be resolved solely by the organizers, and their decisions shall be final and binding.
• Judges’ and jury members’ decisions are final and not subject to challenge.

Prizes

Prize Pool - Rs. 45,000

Point of Contact

(Details to be shared on the Saturnalia platform)