Haruulzangi CTF 2026 Semi-Final

Haruul Zangi CTF 2026 is organized by MNCERT/CC and the Haruulzangi CTF Team, representing the Mongolian CERT and cybersecurity community.
We are proud to announce the 14th edition of Haruul Zangi CTF and welcome participants from around the world. The competition aims to promote practical cybersecurity skills, encourage knowledge sharing, and strengthen collaboration within the global cybersecurity community.

Competition Format
The competition consists of three rounds:
Round 1 – Qualification (Online, Jeopardy)
• Date: August 22, 2026
• Start Time: 09:00 (UTC+8)
• Duration: 24 hours
Round 2 – Semi-Final (Onsite, Jeopardy)
• Date: September 19, 2026
• Location: Ulaanbaatar, Mongolia
Round 3 – Final (Onsite, Attack & Defense)
• Date: September 24, 2026
• Location: Ulaanbaatar, Mongolia

Challenge Categories
• Pwn
• Web
• Forensics
• Cryptography
• Reverse Engineering
• Miscellaneous
The challenges range from beginner to advanced difficulty, providing an engaging experience for both new and experienced CTF players.

Team Information
• Teams may consist of up to 3 players.
• International participants are welcome.

Qualification

The following teams will advance to the onsite Semi-Final:

The top 30 teams from the online Qualification Round, regardless of nationality.
The highest-ranked Mongolian high school team, if not already qualified through the top 30 overall ranking.
The highest-ranked Mongolian women’s team, if not already qualified through the top 30 overall ranking.

Among the international teams that qualify for the Semi-Final, the two highest-ranked teams, based on the online Qualification Round results, will be invited directly to the onsite Final.

If two international teams are invited to the Final, the top eight Mongolian teams from the Semi-Final will advance to the Final. The Final will consist of 10 teams in total and will be played in the Attack & Defense format.

Support for International Finalists
The organizers will provide the following support for the two invited international finalist teams:
• Hotel accommodation during the onsite event.
• A daily allowance to cover meals and local expenses.
Invited international teams are responsible for:
• International and domestic transportation.
• Airfare and all other travel-related expenses.
Visa invitation letters and supporting documents will be provided upon request.

Previous Challenges
Challenges from previous Haruul Zangi CTF competitions are publicly available in our GitHub organization:
https://github.com/haruulzangi
We look forward to welcoming teams from Mongolia and around the world to Haruul Zangi CTF 2026.
Good luck, have fun, and see you in Mongolia!

Information for International Teams
Your path to the Final
1. Direct invitation to the Final
Among the international teams that qualify for the Semi-Final, the two highest-ranked teams — based on the online Qualification Round results — are invited directly to the onsite Final. These teams do not play the Semi-Final.
2. Semi-Final participation
Other international teams that finish in the top 30 of the Qualification Round are welcome to attend the onsite Semi-Final in Mongolia on September 5, 2026, at their own expense. No financial support is provided by the organizers for Semi-Final participation.
The Final takes place on September 24, 2026 in the Attack & Defense format and consists of 10 teams: the 2 invited international teams and the top 8 teams from the Semi-Final.
Support for the two invited international finalists
Provided by the organizers:
Hotel accommodation during the onsite event
Daily allowance for meals and local expenses
Covered by the teams themselves:
International and domestic transportation
Airfare and all other travel-related costs
Visa invitation letters and supporting documents are available upon request.