Hackathon
Competing in PwC Capture The Flag
August 20244 min read
A CTF is a cybersecurity competition where participants solve challenges to find hidden "flags"—strings of text that prove you've successfully exploited a vulnerability or solved a puzzle. It is essentially a digital treasure hunt that covers categories such as web exploitation, cryptography, and more.
The PwC CTF was organized by one of the Big Four consulting firms, with challenges designed by real cybersecurity professionals rather than academics or students. This professional setting raised the stakes and attracted a diverse mix of university students and working professionals, all sharing a passion for cybersecurity.
Challenges ranged across multiple categories including web exploitation and cryptography. One notable web challenge required chaining multiple vulnerabilities together—SQL injection leading to a file upload, which was then used to achieve remote code execution. Cryptography challenges involved decrypting encrypted messages to reveal plaintext.
After the PwC CTF, the author continued practicing on HackTheBox and TryHackMe. Both platforms are mentioned as places to build and sharpen cybersecurity skills beyond the competition environment.
Beyond technical skills, the CTF reinforced that cybersecurity is fundamentally about understanding systems at a deep level. Every application, network, and piece of software has potential vulnerabilities, and the role of security professionals is to find and fix them before malicious actors do.
The adrenaline rush of a Capture The Flag (CTF) competition is something every tech enthusiast should experience at least once. When PwC Indonesia announced their annual Hackaday CTF event, I knew I had to participate. Little did I know, it would become one of my most memorable experiences in cybersecurity.
For those unfamiliar, CTF is a cybersecurity competition where participants solve challenges to find hidden "flags"—usually strings of text that prove you've successfully exploited a vulnerability or solved a puzzle. It's like a digital treasure hunt, but with hacking.
Categories typically include:
What made the PwC CTF special was its professional setting. This wasn't just a student competition—it was organized by one of the Big Four consulting firms, with challenges designed by real cybersecurity professionals. The stakes felt higher, and the learning opportunities were immense.
Walking into the event, I was struck by the diversity of participants. From university students to working professionals, everyone shared a common passion for cybersecurity. The energy was electric.
Some challenges had me scratching my head for hours. I remember one web exploitation challenge where I had to chain multiple vulnerabilities together—SQL injection leading to file upload, then using that to achieve remote code execution. It required patience, persistence, and plenty of coffee.
The cryptography challenges were particularly fun. There's something deeply satisfying about cracking an encrypted message and watching the plaintext emerge. Each solved challenge felt like unlocking a secret.
Beyond the technical skills, the CTF taught me valuable lessons:
Participating in the PwC CTF solidified my interest in cybersecurity. It's not just about hacking—it's about understanding systems at a fundamental level. Every application, every network, every piece of software has potential vulnerabilities, and the work of security professionals is to find and fix them before the bad guys do.
Since then, I've continued practicing on platforms like HackTheBox and TryHackMe. The CTF was just the beginning of a journey that I'm excited to continue.
If you're interested in CTF competitions, here's my advice:
See you at the next CTF! 🚩