Location: Dead Sea, Jordan
Date: May 11, 2024 (Finals)
Qualified Teams: Top 10 from Online Qualifiers
Duration: 6 hours
Format: Real-life Boot2Root – team-based attack simulation
Topics Covered: Full infrastructure compromise including Active Directory, Web, Pwn, Reverse Engineering, Forensics, OSINT, Privilege Escalation & Lateral Movement
Audience: University students & professionals
Total Prizes: $6,000
Access: Finals held onsite during Day 1 of XpandConf

• 🏠 Each team received access to their own isolated vulnerable infrastructure
• 🧠 Teams had to gain root access, collect flags, and chain multiple vulnerabilities
• 🧩 Realistic environments to simulate penetration testing under pressure
• 📊 Live scoreboard with continuous flag tracking and instance health checks
• ⏳ 6-hour race to fully compromise targets

• Encourage red teaming, critical thinking, and post-exploitation skills
• Promote offensive security learning through real-world scenarios
• Engage & reward top cybersecurity talent across the region
• Bridge the gap between theory and practice