On November 27th 2025, the cybersecurity team of the Faculty of Mathematics and Computer Science of the University of Bucharest, dothidden, had the honor of participating in the 10th edition of the USV-CTF competition that was held online for 24 hours.
The team formed by our Bachelor in Computer Science students Scânteie Alexandru-Ioan (Year 2), Granat Andrei-Ionuț (Year 1), Dodu Andrei-Daniel (Year 1) and Andreiana Bogdan Mihail (Year 2) obtained the 1st place out of 67 in the competition consisting of teams from 15 national and international universities.
The exercise proposed at the USV-CTF consisted of a pentesting task on a virtual machine provided by the organizers, a task in which the team exploited web vulnerabilities such as OWASP top 10 (SQL Injection, Server-side template injection (SSTI), JWT crafting, etc.), performed reverse engeineering on an Android Application and, ultimately, performed privillage escalation to gain root. The technical report can be found at https://dothidden.xyz/ctfs/ctf-usv_2025/squidgame/.

