Offensive security, built for Pakistan.
OFFCON is an offensive security platform built and run from Pakistan: live CTF competitions, hands-on hacking labs and bug bounty practice — priced in rupees, with a national leaderboard alongside the global one.
What is different for competitors here
Priced in rupees
Subscriptions and CTF entry fees are quoted and charged in PKR through a local payment gateway, so you are not paying a card's foreign-transaction margin on top of a dollar price — and you are not blocked when a card refuses an international charge.
A national ranking
The scoring service ranks by country as well as globally. Your standing among hackers in Pakistan is its own board, which is a far more useful number early on than a global rank in the thousands.
Built to be reachable
Labs are reached over WireGuard rather than through a browser-only console, which holds up on the connections people actually have here. Machines are sized to spawn quickly rather than to look impressive in a spec sheet.
For students and societies
University societies running their own events can use the platform to host them — private events, team registration and a scoreboard, without building the infrastructure first. Get in touch and we will set it up.
Where to start
The thing that stops most people here is not the learning material, which is abundant and mostly free. It is that there is nowhere legal to practise. Reading about SQL injection for a month and then pointing a scanner at a site you do not own is how a promising start becomes a criminal record — the law in Pakistan, as almost everywhere, does not have an exception for curiosity.
A lab removes that problem entirely. The machines here are built to be broken and you are authorised to break them, which makes them the only systems most beginners can legally attack. Start on an easy Linux box, get comfortable being stuck, and let the guided tracks supply the order. When you want a clock and other people, enter a CTF.
Questions from Pakistan
Is there a CTF platform in Pakistan?
Yes — OFFCON is built and run from Pakistan, and hosts CTF competitions open to competitors here and internationally. Entry fees are charged in rupees, the scoring service keeps a Pakistan-specific ranking alongside the global one, and university societies can run their own private events on the same infrastructure.
How do I start learning ethical hacking in Pakistan?
The barrier is almost never access to material — it is the absence of a legal system to practise on. Set up a Linux virtual machine, create a free account here, and start on the easy lab machines: they are deliberately breakable and you are authorised to attack them, which is true of nothing else you can reach from your own connection. From there the guided tracks give the sequence, and CTF events give you a clock and a scoreboard.
Can I pay in PKR?
Yes. Plans and CTF entry fees are quoted in rupees and charged through a local gateway, so there is no foreign-currency conversion and no dependence on a card that supports international payments.
Are there cybersecurity jobs in Pakistan?
There is real and growing demand — banks, fintechs, telcos and the software-export sector all hire for security work, and remote contracting for firms abroad is a common route out of a first local role. What almost every employer screens on is demonstrable hands-on ability, which is exactly what solved machines, published writeups and CTF placements are evidence of.
Can my university or society run a CTF on OFFCON?
Yes. Events can be created as private or invitation-only, with team registration, per-team challenge instances and a live scoreboard, so a society can run an internal competition without standing up infrastructure. Contact us and we will help set the event up.
Do I need to be in Pakistan to use OFFCON?
No. The platform is open internationally and most of it is not country-specific at all — the local payment option and the national ranking are additions for competitors here, not restrictions on anyone else.