Announcement & Notices

 Result of stage 1

Registration for NCIIPC-AICTE PENTATHON 2025 is now open arrow image Click here to register

Last date for registration 4th April 2025 (11:59 PM)

NCIIPC-AICTE
Pentathon 2025

NCIIPC in collaboration with AICTE is conducting India’s Second national level Pentesting exercise opening up the opportunity for all technical colleges and universities in India to participate in a challenge specially designed to resemble and mimic the real world CII entities. The objective of this challenge is to scout for a talented pool of pentesters.

We are committed to making indian students ready for cybersecurity jobs by helping them develop essential skills like Vulnerability Assessment and Penetration Testing (VAPT). Our goal is to equip them with the knowledge and hands-on experience needed to excel in the cybersecurity field. Additionally, we wish to provide valuable opportunities to enable them to apply their skills in real-world scenarios and build a successful career in cybersecurity.

The challenge gives students opportunity to showcase their skill and makes them ready not only for cyber roles in the industry but also inspires them to build their own start ups in the cybersecurity domain.

Pentathon 2025 is an initiative to identify and motivate Indian cyber security talent and provide a platform for them to excel.

Stage I: 5th April (Start: 12:00 AM) to 6th April (End: 11:59 PM) 2025

Stage II: 1st to 3rd May 2025

Stage III: Bootcamp for Selected Participants

image

Pentathon 2024 Statistics

image
  • 0
    • Submissions
  • 0
    • Users
  • 0
    • Individuals
  • 0
    • Teams
  • 0
    • Challenges
  • 0
    • Winners

About PENTATHON

India: The Global Powerhouse of Technology

India stands as one of the most promising nations in the world, driven by its exceptional talent and rapid digital transformation. As the global demand for skilled professionals rises and digital ecosystems become increasingly interconnected, India is emerging as a leading hub for innovation and technological advancement.

What is CII?

Critical Information Infrastructure (CII) forms the backbone of a nation's digital ecosystem. It encompasses computer systems and networks whose compromise or destruction could severely impact national security, economic stability, public health.

What is NCIIPC?

NCIIPC, a unit of NTRO, is India’s key agency for protecting Critical Information Infrastructure (CII). It safeguards national databases, financial systems, power grids, telecom networks, transportation systems and other critical IT assets of the country. Additionally, it promotes skill development through collaborations with academia and industry to enhance CII resilience.

The Hidden Threats of Cyberspace

While the Internet has democratized access to information, it has also opened the door to cyber threats. Espionage allows adversaries to silently steal valuable national data from unsuspecting individuals and organizations, while cyberattacks can disrupt operations, spread panic, and even cripple critical supply chains, posing a serious threat to national security.

Vulnerability Assessment & Penetration Testing

Vulnerability Assessment and Penetration Testing aka VAPT plays a key role in monitoring the health of the Critical Information Infrastructure systems. This is the exercise that allows the tester to probe within the systems to understand the gaps that attackers could potentially exploit to breach the cybersecurity defence perimeter.

image

Scouting for Pentesters

With the above challenge in mind, NCIIPC in partnership with AICTE has decided to undertake a program for the scouting of pentesters from around the country.


These pentesters would need to have the technical skills, be willing to learn the global best practices, undertake deep research and last of all innovative with new ideas. It is with such a diverse and talented pool that such a program would succeed.


This is India’s first national level Pentesting exercise opening up the opportunity for all technical colleges and universities in India to participate in a challenge especially designed to resemble and mimic the real world CII entities.

Conduct

The Pentathon 2025 will be conducted in three stages

Stage I

  • A Jeopardy style online competition where students and individuals will compete to qualify for stage-II
  • Date - 5th April (Start: 12:00 AM) to 6th  April (End: 11:59 PM) 2025

Stage II

  • In person Grand Finale.
  • Date - 1st to 3rd May 2025

Stage III

  • Bootcamp and Training on Pentesting Exercises
  • Date - TBD

General Rules

  • No Attacking the CTF Platform:  Participants are strictly prohibited from attempting any attacks on the CTF platform itself. This includes but is not limited to exploiting vulnerabilities, attempting to gain unauthorized access, or disrupting the normal functioning of the platform.
  • Respect Towards Participants and Organizers: All participants are expected to treat each other and the organizers with respect and professionalism. Any form of harassment, discrimination, or disrespectful behavior will not be tolerated.
  • Flag Sharing Prohibited: Sharing flags or any solution details with other participants or outsiders is strictly prohibited. Participants should not collaborate on solving challenges or share answers in any form.
  • Confidentiality of Challenge Information: Participants must maintain the confidentiality of all information related to the challenges, including but not limited to challenge names, descriptions, attachments, and deployment URLs. This information should not be shared with anyone outside of the event until the results are officially released.
  • Communication Through Designated Channels: All communications regarding the event, including questions, clarifications, and announcements, should be conducted through the designated Discord channel provided by the organizers. This approach streamlines communication and ensures that participants receive relevant information promptly. Please ensure to regularly check both the announcements channel within Discord and the Notices provided within the platform for any updates regarding the competition.
  • Fair Play: Participants are expected to engage in fair play throughout the competition. This includes refraining from any form of cheating, such as using automated tools or unauthorized assistance, and respecting the spirit of the competition. Participants should not attempt to brute force or fuzz challenge deployments unless explicitly specified by the organizers.
  • Code of Conduct: Participants must adhere to a code of conduct that promotes a positive and inclusive environment for all involved. Any behavior that violates this code, including but not limited to harassment, intimidation, or discrimination, will result in immediate disqualification and potential further consequences.
  • Legal Compliance: Participants must comply with all relevant laws and regulations, including those related to cybersecurity and data protection, throughout the duration of the event.
  • Right to Modify Rules: The organizing body reserves the right to modify or add any rules at any point during the event with ex post facto. Participants should adhere to any updates or changes communicated by the organizers.
  • Final Decision by Organizers: The decisions made by the organizing body will be final. Any disputes or issues arising during the event will be resolved according to the judgement of the organizers.
  • By participating in the event, all participants agree to adhere to the rules outlined above. Failure to follow these rules may result in immediate disqualification from the competition, as determined by the organizing body.

Prizes

Top teams and individuals after Stage II of the competition will be rewarded with cash prizes by NCIIPC. In addition, the top 10 teams and top 40 individuals (subject to due vetting) will be recognised to be part of the pool of pentesters.

image

Team Prizes
(for winners after Stage II)

  • 1st Prize: Rs. 2.5 Lakh
  • 2nd Prize: Rs. 1.5 Lakh
  • 3rd Prize: Rs. 1 Lakh
image

Individual Prizes
(for winners after Stage II)

  • 1st Prize: Rs. 1 Lakh
  • 2nd Prize: Rs. 75000/-
  • 3rd Prize: Rs. 50000/-

PENTATHON Timeline

 
Week 1: Soft Launch & Awareness

Competition announcement, students get access to guidelines and timeline.

 
Week 2: Registration & Team Formation

Students register online, form teams, and receive confirmation.

 
Week 3: Stage-I Capture the Flag (CTF) Challenge

Registered teams participate in CTF challenges; top teams qualify.

 
Week 3-5: Mentoring & Training

Qualified teams receive mentorship and refine solutions.

 
Week 6: Stage-II Grand Finale

Finalists participate on the Grand Finale.

 
Post-Grand-Finale: Stage-III Bootcamp for Winners

Winning teams attend an advanced bootcamp to refine and implement solutions.