Your journey to Cyber Oasis 2.0 – Hack the Dunes starts in Gabès! GABÈS PENTEST 2026 is a regional qualifying event where the top 9 teams earn their place in the competition in Zawia, Libya. Join us on November 28–29 at the Faculty of Sciences of Gabès
- Dates
- 28–29 November 2026
- Location
- Gabes, Tunisia
- Duration
- 2 days
- Registration
- Coming soon
- Participation
- Teams of 2
In partnership with
Prove it on the target.
Put your skills to the test in a 12-hour Pentest Challenge, where teams of two from the University of Gabès compete in real-world-inspired cybersecurity scenarios. Beyond the competition, discover interactive workshops and Family Cyber Detectives, an engaging cybersecurity awareness experience for students and parents. Learn, investigate, compete, and connect with the cybersecurity community!
Planned categories — subject to confirmation
Explore the programme.
01 · Families · middle & high school
Family Cyber Detectives
Middle- and high-school students are invited to take part with a parent or guardian in a three-hour cybersecurity awareness workshop. At its heart is a 90-minute interactive fictional investigation. Each family shares one computer and steps into the role of “Mr. Detective.”
Together, players will examine digital information, compare sources, ask thoughtful questions and make decisions as the case unfolds. A guided introduction and family discussion connect the experience to safer online habits. The mystery, key clues and ending are reserved for participants to discover during the game.
02 · University students · 25 teams of 2
Pentest Challenge
twenty five teams of two students will tackle practical cybersecurity challenges in a controlled competition environment. Teams will draw on technical investigation, vulnerability analysis, critical thinking and collaboration while demonstrating responsible conduct.
All penetration testing is confined to explicitly authorized event lab systems. External websites, personal accounts, campus infrastructure and other third-party targets are outside the competition scope. Official rules, eligibility requirements, scoring details and selection procedures will be shared by the organizers.
The road to Cyber Oasis 2.0
The student competition supports the selection and preparation of teams to represent the University of Gabès at Cyber Oasis 2.0 – Hack the Dunes, part of a wider Maghreb student cybersecurity initiative in Zawia, Libya. The goal is to celebrate student excellence while strengthening academic exchange and hands-on security skills across the region.
Follow the official channels.
Follow the event’s official channels for registration announcements, the confirmed timetable and practical information for participants and families. The organizing committee will publish registration instructions, session timings, eligibility criteria and the final programme there.
The targets.
Each discipline is listed with its confirmation status. Machine details and proofs are never published in advance.
- 01Confirmed
Web Application Machines
Explore web applications and APIs hosted on competition machines to identify and exploit security weaknesses.
- 02Confirmed
Reconnaissance & Enumeration
Investigate target machines, discover running services, and gather information to identify potential entry points.
- 03Confirmed
Linux Privilege Escalation
Challenge yourself on Linux machines by identifying weaknesses and working toward higher system privileges.
- 04Confirmed
Windows & Active Directory
Navigate Windows-based machines and domain environments to uncover security weaknesses and achieve challenge objectives.
- 05Confirmed
Reverse Engineering
Analyze binaries, executables, and machine services to understand their behavior and solve technical challenges.
- 06Confirmed
Cryptographic Challenges
Tackle machine-based challenges involving cryptography, encoded information, and secure communication mechanisms.
- 07Confirmed
Post-Exploitation & Forensics
Investigate compromised lab machines, analyze digital artifacts, and uncover information needed to complete objectives.
How it works.
- Format
A 12-hour ethical hacking competition where players tackle cybersecurity challenges in authorized environments, earning points through user and root flags. First-blood bonuses reward the fastest valid submissions. Each team's score equals its highest individual player score, and the top 9 teams qualify for Cyber Oasis 2.0 – Hack the Dunes in Zawia, Libya.
- Participation
- Teams of 2
- Eligibility
The Pentest Challenge is exclusively open to students currently enrolled at the University of Gabès. Participants must form teams of exactly two players, with both members meeting the eligibility requirements. Each student may join only one team, and participation is limited to 25 teams (50 players).
- Equipment
Each participant must bring their own laptop, charger, and power cable, along with any necessary accessories, such as an extension cord, power strip, plug adapter, or mouse. Players should ensure their equipment and required tools are installed, tested, and ready to use. Internet access and power outlets will be provided at the venue.
- Fees
Participation in the Pentest Challenge is completely free of charge. No registration or competition entry fees are required.
Official rules: read the rules.
Two days. Root them.
Day 01
Saturday 28 November- 08:0009:45
Registration for the information session
Arrival and welcome
- 10:0012:00
Information session: interactive quiz + presentation
Information and engagement
- 12:0014:00
Lunch break
Scheduled pause
- 14:0016:00
Workshop block 1
Practical learning
- 16:0016:30
Break
Scheduled pause
- 16:3017:30
Workshop block 2
Practical learning
- 17:3018:00
Networking
Participant exchange
- 18:0020:00
Free time
Unscheduled interval
- 20:0021:00
Technical check
Competition readiness
- 21:0009:00+1 day
Pentest competition
12 hOvernight challenge session — 12 hours, until 09:00 the next morning
Day 02
Sunday 29 November- 00:0009:00
Pentest competition
ContinuesStarted on Day 01 at 21:00 — runs through the night until 09:00.
- 09:0011:00
Closing ceremony
Results, rankings and prize announcement
- 11:00End of Gabès Pentest 2026
Day 01 21:00 → Day 02 09:00 · midnight marked
Your name on the board, 28–29 November 2026.
Registration will open soon. Opening details will be announced by the organizers.
- Dates
- 28–29 November 2026
- Location
- Gabes, Tunisia
- Status
- Coming soon
Questions.
Organizer contact details will be published here.
No specialist knowledge is required for the family workshop. The experience is designed for students and accompanying adults to explore the case together, with guidance when needed.
No. The investigation is fictional and supervised, with no real-person tracking or private-account access.
Only students enrolled at the University of Gabès may participate. There are 25 team places, and the top nine teams qualify.
Teams need their Student ID Number or Inscription Code from their university inscription letter to register.
Each Pentest player must bring their own computer and charger or power cable. They should also bring any accessories they need, such as an extension cord, power strip, plug adapter or mouse, and check that their equipment is ready to use.
No. Both teammates must be students at the University of Gabès.
Yes. Internet access and power outlets will be available at the venue. Participants should still bring their own chargers, power cables and any accessories they need.
Yes. Food and drinks will be provided during the event.
For the morning cybersecurity awareness workshop, check-in runs from 08:00 to 09:45. On-site registration for the workshops and Pentest Challenge opens at 13:00.
Activities will be available in English and Arabic.