Core Incursion 2026 results and event retrospective.
2026 Official In-Person Podium
Biterra is the gamified learning platform that hosts every Pwn2Play challenge, scoreboard, and team. Built by a DMU Hackers alumnus, it’s the permanent home for our flagship CTF. Wherever Pwn2Play goes, Biterra is the platform underneath it.
Open Pwn2Play on BiterraFinal public stats from the completed Pwn2Play 2026 event.
From doors to after-party — all times BST.
The final public 2026 challenge set, excluding the two Part 2 form verification rows.
SQL injection, XSS, SSRF, authentication bypasses and web logic flaws.
Unexpected formats, strange clues and challenge ideas that refuse one label.
Recover evidence from captures, filesystems, memory, logs and hidden artefacts.
Chain attack paths from initial access to deeper compromise.
Track down answers through public records, digital footprints and careful research.
Disassemble, decompile and decode binaries to uncover hidden logic.
Break ciphers, exploit weak implementations and reason about flawed secrecy.
Break compiled targets with memory corruption, control flow and exploit craft.
Automate parsing, brute force paths and transform data under time pressure.
A first flag to get teams settled into the platform and event flow.
Navigate shells, permissions, processes and system clues like an operator.
52 public challenges across categories and difficulties.
The final category mix for Pwn2Play: Core Incursion 2026.
Difficulty labels from the final 2026 challenge set.
Gateway House Floor 5
De Montfort University
The Gateway, Leicester LE1 9BH
Student & Guest WiFi was available for the 2026 event. Competitors brought their own machines.
De Montfort Students' Union
Campus Centre Building
Mill Ln, Leicester LE2 7DR
The bar opened after the event for competitors and guests attending the awards.
The 2026 result scope is the official in-person podium from the main scoreboard.
AI usage was forbidden. This was the official competitive track used for main event standings.
Teams who chose to use AI competed on a separate scoreboard on Pwn2Play.
The published 2026 results list the official in-person podium only.
Following the awards ceremony, join us for a social route around Leicester with a combination of DMU societies. Whether you competed or just want to celebrate, everyone is welcome.
Prize providers and challenge creators supporting Pwn2Play: Core Incursion.
Supporting the winners with prizes that make the competition worth chasing.
Kit365 is the primary sponsor of Pwn2Play, providing prizes for the winning teams. Their support helps make our flagship CTF a stronger event for cybersecurity talent.
TryHackMe is supporting Pwn2Play by providing prizes for our event, helping us reward standout performances and make the competition more exciting for participants.
Immersive Labs is supporting Pwn2Play as a prize provider, helping us reward standout teams while backing practical cyber skills development through realistic, hands-on learning.
Building realistic problems and scenarios for competitors to solve under pressure.
North Quay Holdings is a private sector company specialising in all-source intelligence and OSINT. They create challenges for Pwn2Play, helping deliver realistic and engaging CTF experiences.
Redcentric is a managed IT services provider delivering network, cloud, and security solutions. They create challenges for Pwn2Play, bringing industry expertise and real-world scenarios.
Want to sponsor Pwn2Play or get involved?
Become a Sponsor