---
title: "CTF"
url: "https://unshade.pl/en/services/ctf"
lang: "en"
summary: "We design and run Capture The Flag competitions — for training and for events."
---

# CTF

From challenges and infrastructure to running it live. We organised what is probably Poland's largest on-site CTF — 2084 CTF (HackYeah 2025) and Reentry CTF (HackYeah 2026).

## Scope

- Challenge design matched to the participants' level
- Platform and infrastructure (per-team instances)
- Live operation and participant support
- Training CTF for company teams
- Event CTF for conferences and hackathons

## What you get

- A ready challenge set with solutions
- Platform and monitoring during the event
- Scoreboard and summary
- Learning material after the event

## Our competitions

2084 CTF at HackYeah 2025 and Reentry CTF at HackYeah 2026 — probably Poland's largest on-site CTF competitions. Challenges, platform, infrastructure and live operation were all on us: from the first flag to the final scoreboard.

## CTF as training

A private competition for your team is the fastest way for developers and admins to see vulnerabilities from the attacker's side — in a safe, gamified environment. We match the challenges to your stack and the participants' level, and hand over solutions and learning material afterwards.

## How we run it

- **Challenge design** — jeopardy or attack/defence, from web and cryptography to forensics and reverse engineering.
- **Platform and infrastructure** — per-team instances, monitoring and technical support during the event.
- **Operation** — briefing, participant support, a live scoreboard and a summary.
- **Experience from both sides** — we play in top CTF teams ourselves and win awards in competitions such as DEFCON Crack Me If You Can.

## Blog

- [120 minutes that can save your company – a cybersecurity awareness training](https://unshade.pl/en/blog/120-minutes-that-can-save-your-company.md)
- [PBKDF i bcrypt](https://unshade.pl/en/blog/pbkdf-and-bcrypt.md)
- [How to Bypass AMSI? My Experience with PowerShell Bypassing](https://unshade.pl/en/blog/how-to-bypass-amsi.md)
- [Bcrypt Cocktail and Hash Extraction](https://unshade.pl/en/blog/bcrypt-cocktail-and-hash-extraction.md)
- [Sacrificial session](https://unshade.pl/en/blog/sacrificial-session.md)
- [Hash function](https://unshade.pl/en/blog/hash-function.md)
- [Introduction to Password Cracking #3 Rules](https://unshade.pl/en/blog/introduction-to-password-cracking-3-rules.md)
- [Introduction to Password Cracking #1 Intro](https://unshade.pl/en/blog/introduction-to-password-cracking-1-intro.md)
- [Introduction to Password Cracking #2 Wordlists](https://unshade.pl/en/blog/introduction-to-password-cracking-2-wordlists.md)
- [CrackMeIFYouCan 2022 DEFCON Writeup](https://unshade.pl/en/blog/crackmeifyoucan-2022-defcon-writeup.md)

## Request an anonymised report

See what our penetration test report looks like: the structure, findings with PoC, CVSS ratings and recommendations. We send an anonymised version to your work email.