Contest Guidelines:

  • You will be given access to a host and database with valid credentials
  • You will be given a topology map
  • You will be given OS version and database version information
  • Your objective is to retrieve data out of the database or by compromising the host to steal sensitive data values
  • Submit the data set in the clear to


  • Entrant must be registered via the website and receive a confirmation email.
  • The contest will run until 11:59:00 PM PST (UTC-8) on 2/29/2020.
  • The winner will be the first person to succeed at compromising the database and obtaining clear text data from sensitive fields
  • Denial of service attacks are not allowed
  • Prizes are in U.S. Dollars

1st Prize = $5,000.00
2nd Prize = A pair of Baffle crypto socks
3rd Prize = $5 Starbucks gift card

  • Employees and partners are not eligible