One arena. Every discipline.
OFFCON brings hands-on labs, competitions, community, and real bounties together in a single platform.
Vulnerable machines
Hundreds of boxes across Linux, Windows, and Active Directory. Spin one up in seconds — each isolated in its own gVisor sandbox.
Live CTF arena
Jeopardy and attack-defense competitions with real-time scoreboards, first-blood alerts, and seasonal championships.
Guided tracks
Structured paths from your first nmap scan to advanced binary exploitation, each with hands-on, gated modules.
Community forum
A global community trading tradecraft, nudges (never spoilers), and war stories. Get unstuck and give back.
Writeups
Read and publish polished walkthroughs — automatically unlocked the moment you legitimately root a box.
Bug bounties
Take your skills to real targets. Hunt vulnerabilities in live programs and earn cash bounties paid straight out.
Built for real offensive work
The infrastructure that makes hands-on hacking safe, fast, and fair.
Isolated by default
Every lab runs sandboxed and network-segmented. Your exploits never touch another user.
Private VPN
Connect over WireGuard to dedicated regional servers with low latency anywhere.
Instant spawns
No waiting in queues. Machines provision in seconds and tear down cleanly.
Cheat-resistant flags
Every team instance gets its own randomly-minted flag (only its hash is stored), and machine flags are HMAC-bound to your user and instance — so a shared or leaked flag is worthless to anyone else.
Account security
2FA, WebAuthn, session management, and per-device controls baked in.
Global by design
A worldwide arena — compete and climb against the best, wherever you are.