Recruiting and community Capture The Flag challenges I designed at Cymulate and Matrix.
A recruiting CTF blending virtual and physical space: candidates raced a real bomb timer in the office (webcam-monitored), defusing it through escalating challenges across reversing, pwn, mobile, cryptography and forensics. Co-designed with Or Bar-on.
The 2022 recruiting edition, expanded with a new Misc category and an approachable Warmup tier to ease players in, alongside pwn, reversing, mobile and crypto challenges.
A reverse-engineering CTF built around nested "matryoshka"-style binaries (bin + ushka), run at Cymulate's Black Hat USA 2022 booth.
A multi-stage CTF on attacking and securing the Model Context Protocol (MCP) and AI-driven systems — filesystem, database, API and tool abuse — built on real MCP vulnerabilities disclosed by Cymulate. Five stages, with the final stage at Black Hat USA 2025.
Over five years competing in CTFs with the CamelRiders team — excelling in Reversing, Pwn, Mobile, Cryptography, Forensics.