Cyberhunt 2077

OverviewThe year is 2077. Every system is connected, and every system is broken. Someone has to find the cracks before the wrong people do.Cyberhunt 2077 is a bug-bounty style cybersecurity challenge by the Open Source Developers Community (OSDC), Noida. You get real-world scenarios, you hunt down what's wrong, and you write it up the way security researchers do: as a clear, reproducible, professional bug report.Finding the bug is half the job. Convincing someone it matters is the other half.How it worksYou'll receive a set of scenarios/targets: vulnerable apps, code snippets, configs, or system descriptions.Investigate each one, identify the vulnerability or flaw, and work out its real impact.Submit a bug report for each finding through our platform.Reports should be coherent and complete. Weightage is given to accuracy, how comprehensive the report is, and time of submission.What your report must coverVulnerability overview: a descriptive title, the vulnerability class (e.g. broken authorization, injection), the affected component, and a severity rating (Low / Medium / High / Critical)Root cause: the underlying flaw and where it sits in the logicMechanism: how the flaw plays out step by step, and why the system's checks fail to stop itAttack path: exactly what an attacker supplies or does to reach the vulnerable behaviourImpact: what an attacker concretely gainsProof of concept: screenshots, payloads, or code that back up each claimWho can participateOpen to anyoneParticipate soloNo prior bug bounty experience needed. If you're curious about security and can write clearly, you're in. Beginners and seasoned hunters both welcome.TimelineRegistrations close: 29th October, 2026 at 11:59 PMEvent goes live: 29th October, 2026, 11:59 PMSubmissions close: 30th October, 2026, 11:59 PMResults: soon after submissions closeMode: Online via OSDC's DiscordRewards.xyz domains for top 3 participantsCertificates for all participants with valid submissionsRulesOnly test the targets and scenarios provided. Anything outside scope is off-limits.No attacks on event infrastructure, other participants, or third-party systems.Plagiarised or AI-generated-without-understanding reports will be disqualified.Duplicate findings: the earliest valid, complete report gets priority.Judges' decisions are final.About OSDCThe Open Source Developers Community is a student-run community around Noida, that lives and breathes open source. We're the folks behind OSDHack, CodeJam, Hack Nights, Linux Installfests, and weekly meetups. Our thing is learning by building, breaking, and shipping, together.