Collab & Hosting
EYCC CTF 2026 (Hack Club of STEM Egypt)
Beginner-FriendlyNationalEgyptJeopardyStudentsGrades 7–13
Official challenges and writeups for EYCC CTF 2026 — Egypt's national cybersecurity competition for students, organized in partnership with Hack Club of STEM Egypt and authored by Mont5ab El2hwa.
Egypt’s first cybersecurity competition created specifically for high school students returned for its highly anticipated Final Round. After proving themselves in the EYCC 2026 Qualifiers, 15 outstanding teams featuring 55 rising young hackers earned their place at the finals to compete, showcase their skills, connect with fellow talents, and take another step toward becoming Egypt’s future cybersecurity leaders.
Qualifiers (48h): July 24–26, 2026Finals (9h): August 13, 2026
Organized with Hack Club - STEM EG
Challenge Distribution by Domain
50authored
- Web(22%)11
- Reverse(20%)10
- Crypto(14%)7
- Forensics(10%)5
- Mobile(10%)5
- OSINT(10%)5
- Misc(8%)4
- Pwn(6%)3
What Mont5ab El2hwa handled
Authoring every challenge from scratch across 8 categories (Web, Reverse, Pwn, Crypto, Forensics, OSINT, Mobile, and Misc)
Designing custom vulnerabilities, multi-step exploit chains, and verifying every solve path before launch
Publishing full writeups, source code, and step-by-step solutions to help players learn and level up
Handling live challenge hosting, infrastructure, and technical support across both qualifiers and the on-site finals
35+
Teams
~300
Players
Event Gallery
Authored Challenges & Writeups
Full source code, task files, and infrastructure for our authored challenges are available in the GitHub Repository (opens in a new tab).
Mall Albostan
Mall Albostan, Downtown Cairo's go-to spot for laptops, GPUs, and everything in between...
Brew Bank
Welcome to Brew Bank. Do not bruteforce. Think like a hacker, not a bot.
Brew Bank Revenge
Welcome to Brew Bank Again. Do not bruteforce...
2hwa fat7 m7aweeg
A Flask and Docker URL viewer with a sanitization blind spot — find the gap and turn it into a working exploit.
NimbusPages
try harder
Krusty Krab Order Boards
Mr. Krabs finally put the Krusty Krab order boards online, and SpongeBob finally admitted what he really wants: the Krabby Patty secret formula. It is filed at `/verysecretrecipe`, and the fry cook account you can sign up for is not getting in there. Mr. Krabs is, though. He reads every link dropped in the complaint box himself, from his own logged-in browser. Get the formula out of the manager's session.
Rising Star
The challenge is fully solvable black-box. Source code is included only for convenience.
sql? no sql
sql nosql sql nosql sql nosql sql nosql flag => EYCC{part1_part2_part3_part4}
CoffeeHub
JUST /flag.txt
CoffeeHub Revenge
JUST /flag.txt again
Shai b'n3na3
A cup of mint tea can be simple, but things aren't always what they seem. Think like a Bug Hunter. No brute force
Team Credits
Contributors across challenge authoring, infrastructure, and mentoring
Team
vr3e
The Crypto Guy
Abdelrahman_483
Reverse Engineering
Agn4by
Web Security
2FACE
OSINT
k45w4ra
Binary Exploitation
Spect3r
OffSec & Hardware
0xsponge
Web & Mobile
OG13
Digital Forensics
Y0un15
Forensics & Reverse
00xcanelo
Web Security
0xheg3zy
Mobile Security
MAb0EL3TA
Digital Forensics
0xreizouko
Reverse Engineering
mo.ha08
Reverse Engineering
Planning an event or need challenge authors?
We partner with organizers on challenge authoring, tournament infrastructure, and end-to-end event delivery. Tell us what you're planning and we'll take it from there.