CTF Challenges
Test your skills against healthcare-themed capture the flag challenges. From beginner to expert levels, there's something for everyone.
Led by Danny Danhammer HetzelCode Cadaver
Break Every System. Save Your Friend.
Test your skills against healthcare-themed capture the flag challenges. From beginner to expert levels, there's something for everyone.
Your best friend entered St. Dismas Hospital with flu-like symptoms.
He never came back.
Now his hotel room has been torn apart, his phone is still beaconing somewhere in the wreckage, and every clue points toward a hospital that seems less interested in healing people than hiding what happens to them.
Code Cadaver is Biohacking Village's immersive healthcare cybersecurity CTF — a dark, story-driven challenge that pulls players through the connected systems of a compromised hospital and the criminal network surrounding it.
Follow wireless signals. Pivot from guest networks into production systems. Hunt through patient intake records, webcams, HL7 traffic, payment systems, RFID credentials, pager networks, infusion devices, DICOM archives, and secured medical cabinets. Every system holds another piece of the truth. Every solved challenge brings you closer to Ethan — and deeper into St. Dismas.
This is more than a collection of puzzles. It is a full-chain medical cyber-thriller built around the technologies, mistakes, dependencies, and trust relationships that keep modern healthcare running. You will need technical skill, persistence, curiosity, and a willingness to question everything.
The hospital is closing in. The machines are still working. Ethan is running out of time.
Break every system. Save your friend before St. Dismas finishes what it started.
Rules of Engagement
The official rules for the Biohacking Village CTF. By participating you agree to abide by these and the Code of Conduct.
Registration
- •Participants may register only once. Duplicate registrations under alternate names, emails, or aliases will result in immediate disqualification of the entire team.
- •A valid and verifiable email is required. Disposable or temporary emails may result in account rejection.
- •By registering, participants agree that any inaccurate or misleading information may result in disqualification and account deactivation.
- •Participants must adhere to the Biohacking Village Code of Conduct. Violators will be disqualified and banned from all future BHV events.
Teams
- •Teams may consist of 1 to 5 participants.
- •Team formation may occur before the competition begins. Once the CTF starts, no changes to team rosters are allowed.
- •Team coordination and formation can occur in the Discord channel: #ctf-teambuilding.
- •Each team must designate a Team Captain who serves as the primary point of contact with event organizers.
- •Each participant may only be on one team. Dual participation is strictly forbidden.
Challenge Submissions
- •All submissions must be made during the official competition window. Late submissions will not be counted.
- •For hardware-based or physical challenges, do not tamper with shared equipment, intentionally lock out others, or bypass provided access controls.
- •Infrastructure concerns should be reported promptly in the Discord #ctf-support channel.
- •Flags may only be discussed or shared within your registered team. Sharing flags or answers with anyone outside your team — including via Discord DMs, social media, or public forums — is strictly prohibited.
Scoring
- •Each challenge has a fixed point value, listed in the challenge description.
- •The winning team is the one with the highest total score within the CTF window.
- •In the event of a tie, the winner is the team that reached their final score first (based on submission timestamps).
- •TryHackMe's team scoring mode serves as the official scoreboard.
Disqualification
- •Registering more than once or using an alternate identity.
- •Violating the Code of Conduct, on-site or in official online spaces (e.g. Discord).
- •Sharing or discussing flags or solutions outside your registered team.
- •Attacking or disrupting event infrastructure beyond the intended challenge scope, performing denial of service, interfering with other teams, or escaping/tampering with sandboxed environments.
- •Tampering with physical or virtual challenge systems not intended by the organizers.
Privacy
- •BHV does not share participant data beyond what is necessary to administer the competition and issue awards.
- •No information will be sold or reused outside of Biohacking Village communications.
- •Participants may request the removal of their data after the event via the official contact channel.
- •BHV does not control TryHackMe's data policies — refer to their Privacy Policy.
CTF Team
RELIQUARY
Hack the DEF CON 34 Badge, BHV Style
DEF CON released a preview of the DC34 badge and it looks highly customizable, so we decided to do something useful with it.
RELIQUARY is an open-source Biohacking Village CTF community project focused on exploring, hacking, and building on the official DEF CON 34 badge. While we're sitting around running the CTF, we'll be working together to understand the hardware, document what we find, and turn the badge into a portable security tool for medical device labs, firmware verification, DICOM evidence signing, and CTF challenge validation.
Basically a group "hack the badge" project — but with a BHV and medical-security flavor. No promises yet: we only have teaser images and early chip information. Once we have the real badge, schematics, and firmware documentation, we'll start tearing into it (without immediately bricking it).
Anyone can join in — hardware hackers, Rust developers, reverse engineers, cryptography people, medical device security researchers, or anyone who just wants to poke at the badge with us. We'll be working on it during DEF CON at the Biohacking Village.