MALWAROUS join

// student-run cybersecurity community at quaid-i-azam university

Break things. With permission.

CTFs, hackathons and hands-on workshops at QAU, Islamabad — from web exploitation to red-teaming LLMs.

register_for_next_ctf join_malwarous
  • 33.75°N 73.14°E
  • islamabad, pk
  • est. [YEAR]

// 01 — next event

~/events/next

[ registration open ]

[EVENT NAME]

date
venue
[VENUE]
format
jeopardy ctf
difficulty
high

starts in

--days
--hrs
--min
--sec
register

// 02 — what we do

~/about

malwarous@qau:~$ cat what-we-do.log

  1. 01

    CTF competitions

    Jeopardy-style challenges in web, crypto, pwn, forensics and reversing. We run them on campus and host them for students from other universities.

    • web
    • crypto
    • pwn
    • forensics
    • rev
    -> upcoming ctfs
  2. 02

    Hackathons

    Build something real against a deadline: security tooling, detection, privacy, and whatever else survives the night.

    • tooling
    • defense
    • privacy
    • ai
    -> upcoming hackathons
  3. 03

    Workshops

    Hands-on sessions on the tools and techniques behind real security work, and on AI: using AI tools well, securing AI systems, and red-teaming LLMs.

    • security tools
    • ai security
    • llm red-teaming
    -> academy

// 03 — upcoming events

all events ->

malwarous@qau:~$ events --upcoming

Upcoming Malwarous events
date type title difficulty status
[DATE] workshop [WORKSHOP TITLE] low live
[DATE] ctf [EVENT NAME] high open
[DATE] workshop [WORKSHOP TITLE] medium open
[DATE] hackathon [HACKATHON NAME] medium full
[DATE] ctf [EVENT NAME] critical open

// 04 — academy

~/academy

Learn it before the CTF asks.

Self-paced learning paths built from our workshops. Pick one, work through it at your own speed, then test yourself in the arena.

browse all paths ->

malwarous@qau:~$ tree ~/academy -L 1

  • Web Hacking 101

    HTTP, cookies, sessions and the OWASP Top 10, learned by breaking a deliberately vulnerable app.

    level: beginner[N] modules

  • AI Security Fundamentals

    How LLM apps fail — prompt injection, data leakage, insecure tool use — and how to red-team them.

    level: intermediate[N] modules

  • Linux for CTFs

    The shell, permissions, processes and pipes: the ground every challenge assumes you're standing on.

    level: beginner[N] modules

  • Crypto & Forensics

    From classical ciphers to broken RSA, from file carving to packet captures.

    level: intermediate[N] modules

// 05 — latest write-ups

all write-ups ->

malwarous@qau:~$ ls -la ~/writeups | head -5

// 06 — hall of fame

full rankings ->

Top of the board.

Points earned across Malwarous CTFs this season. Handles only — you choose what name goes up here.

malwarous@qau:~$ scoreboard --top 5

Top 5 players this season
rank handle points events played
01 [HANDLE] [PTS] [N]
02 [HANDLE] [PTS] [N]
03 [HANDLE] [PTS] [N]
04 [HANDLE] [PTS] [N]
05 [HANDLE] [PTS] [N]

// 07 — team

~/team

The humans behind the shell.

Malwarous is run by students at QAU. We write the challenges, run the events, and keep the lights on.

malwarous@qau:~$ finger @malwarous

// 08 — join

~/join

Curiosity is the only prerequisite.

No experience needed. Come to a workshop, play a CTF, or lurk on Discord until you're ready. If you can open a terminal — or want to learn how — you're in.

join_malwarous discord

already have an account? log in -> · discord: [DISCORD LINK]

// 09 — partners

~/sponsors

This space is unclaimed.

We're looking for partners to fund prizes, contribute challenges, or run a workshop with us. If your team hires people who like taking things apart, we should talk.

get in touch
  • slot_01[ available ]
  • slot_02[ available ]
  • slot_03[ available ]
  • slot_04[ available ]