Defending Eswatini's Digital Frontiers,
One Flag at a Time.
Welcome to the CTF eSwatini platform: hands-on cybersecurity challenges, free and open to everyone in the Kingdom, from first-time hackers to seasoned practitioners.
Sovereign Cyber Defense for the Kingdom
CTF eSwatini is a grassroots initiative that bridges the gap between theoretical computing education and practical, real-world defensive skills. What started as a founding cohort of 130+ students, self-taught developers, and IT practitioners is growing into a nationwide network, and this platform is where it trains: free, hands-on challenges that help Swazi tech talent protect infrastructure, discover vulnerabilities ethically, and build sustainable careers in tech.
Ethical Standard (White-Hat First)
We strictly enforce authorized, sandbox-only testing principles. Our platform teaches security methodologies to build defenders, not bad actors.
Open & Inclusive
No barriers to entry. Whether you are a university undergrad, a high school student, or an active software engineer, everyone in Eswatini has a place in our community.
National Impact
Developing Eswatini's digital talent pipeline to support local tech hubs, government infrastructure, and emerging digital enterprises.
From First Login to First Flag
Register
Create your free account and choose your hacker handle. It takes a minute and anyone in Eswatini can join.
Solve Challenges
Pick a challenge in any domain, work out the hidden flag, and submit it to earn points. New to this? Start with the easiest challenges in each category.
Learn Together
Share writeups, compare approaches in team debriefs, and learn from mentors and peers across all four regions.
Nine Ways to Test Your Skills
Challenges are written and maintained by our own members and span nine core domains, from Linux and networking fundamentals through to advanced exploit analysis.
Cryptography
Ciphers, mathematical locks, and encryption analysis.
Exploit
Web vulnerabilities, buffer overflows, and payload crafting.
Forensics
Network PCAP analysis, memory dumps, and disk artifacts.
Miscellaneous
OSINT, esoteric puzzles, and scripting challenges.
Mobile
Android and iOS APK reverse engineering and mobile security.
Penetration Testing
Network discovery, enumeration, and privilege escalation.
Programming
Automated scripting, algorithmic parsing, and speed coding.
Reverse Engineering
Binary decompilation and assembly code analysis.
Steganography
Hidden data extraction in media, audio, and image files.
Play Fair, Stay in Scope
All skills are practiced solely within our authorized sandboxes. Attacking infrastructure that is not a challenge, sharing plaintext flags with competitors during active rounds, or launching denial-of-service attacks against the platform results in immediate disqualification and account revocation.
Ready to Claim Your First Flag?
Join 130+ Swazi developers, students, and ethical technology enthusiasts building the cyber defense foundation of our nation.