About CTFUnwrapd
The dedicated competitive cybersecurity division of Beunwrapd, purpose-built to forge world-class ethical hackers and defenders across India.
Practical Offensive Security for Indian Engineering
As an integral pillar of the wider Beunwrapd career and engineering verification network, CTFUnwrapd solves a fundamental gap in technical education: the absence of safe, real-world cyber ranges.
Rather than treating computer security as theoretical compliance, students audit live containerized systems replicating contemporary zero-days, web exploitation flaws, and enterprise threat vectors.
Every participant builds an undeniable, cryptographically verified record of technical competence.
Strict DPDP Act, 2023 Compliance
India's Digital Personal Data Protection Act, 2023 mandates strict fiduciary responsibility, purpose limitation, and consent. CTFUnwrapd embeds these protections at its architectural core.
Purpose Limitation
- •Only essential competition identifiers collected (handle, email).
- •Zero intrusive tracking scripts or ad analytics profiling.
- •Data collected for verification is never monetized or shared.
Operator Sovereignty
- •Full control via /me to toggle public profile visibility on or off.
- •Instant ability to redact university attribution or country codes.
- •Complete right to erasure upon request with zero penalties.
Storage Encryption
- •AES-256 encrypted at rest and TLS 1.3 encrypted in flight.
- •Strict PostgreSQL Row-Level Security (RLS) guarantees isolation.
- •Zero foreign data brokers or third-party telemetry aggregators.
Zero-Trust Ephemeral Sandboxing
Engineered for absolute isolation, anti-cheat enforcement, and national scalability.
Micro-Container Isolation
Target environments run inside short-lived container sandboxes with strictly bounded CPU and blocked outbound network egress.
Dynamic Flag Entropy
Flags are generated with cryptographic entropy tied to each player ID, rendering flag-sharing invalid and auto-detecting collusion.
Token-Bucket Rate Limiting
Scoring endpoints enforce distributed token-bucket rate limits against automated brute-forcing, keeping the arena fair and responsive.
Cryptographic Certificates
Event certificates feature verifiable SHA-256 hashes, eliminating forged credentials and certifying genuine solve performance.
Ethical Hacking Mandate
CTFUnwrapd is dedicated exclusively to ethical, defensive, and authorized penetration testing education. Our arena exists to empower engineers to protect India's digital infrastructure.