Virtual Labs

Some challenges require access to a virtual lab. This year, you can get access to the virtual lab by signing up at Qualification 2026.

If you have already played a CTF on the Campfire Security platform, you can use the same account and do not need to sign up again.

On the page where you can access your virtual lab, there is also a FAQ page and a Toolbox page in the bottom left corner.

If a challenge does not have a lab instance, a handout will be provided as a ZIP file instead. To ensure the correct file has been downloaded, a SHA256 checksum is provided in the challenge description. This can be used to verify the file's integrity and confirm that the downloaded file is identical to the original.

Campfire Security is responsible for operating the virtual labs. If you encounter any issues or questions that cannot be resolved via the FAQ or Toolbox page, you are always welcome to send an email to support@campfiresecurity.dk or create a ticket on Discord.

Three ways to play

The platform offers three different ways to access challenges. All challenges can be run in Browser Lab and VPN Lab. Challenges with the globe icon also support Public.

Challenge icons

The icons at the bottom of each challenge card indicate the access method:

Examples of challenge cards as they appear on the platform:

LAN icon (left two) = lab only. Globe icon (right two) = also supports Public.

Start a virtual lab

Once you have signed up, you can click the button in the top right corner to start your virtual lab. A dialog will appear where you need to choose a lab type. There are two lab types:

If this is your first time participating in Qualification, we strongly recommend choosing a Browser Lab. It is recommended that you use a Chrome-based browser.

Once the lab is available, you will have the option to open it or download a VPN configuration.

If you encounter any issues with your virtual lab, you can click the gear icon next to the lab button. Here you have the option to reset your virtual Kali machine (if using browser), as well as shut down your lab. If your lab is close to expiring, you can extend the time from the same menu.

Browser Lab

In the browser lab, you get access to a preconfigured Kali Linux machine directly through your browser. If you are asked for a username and password at any point in your virtual lab, you can use the following:

VPN Lab

If you choose a VPN lab, you need to have WireGuard installed. Download the VPN configuration from the platform, import it into WireGuard, and activate the connection.

Start a challenge

Once you have set up your lab, you can start your first challenge. To start a challenge and make it accessible through your lab, go to the challenge page marked with a flag icon on the left side.

Then choose which challenge you want to start and click on it. This will open a window with a challenge description. In the top right corner you will have the option to start, stop, and reset the challenge.

If you chose a VPN lab, you can get a list of hosts by clicking the gear icon next to the lab button and expanding the field in the middle of the window that appears.

Globe challenge without an active lab

If you click on a challenge with a globe icon without having a lab running, the challenge will start as Public:

Globe challenge with an active lab

If you have a lab running, you can choose whether the challenge should run in the lab or as Public:

LAN challenge

Requires an active lab — cannot be started as Public.

Static challenge

Download the file and verify it with the SHA256 checksum from the challenge description.

Control buttons

When a challenge is running, three buttons are displayed in the top right corner of the challenge window:

• Reset (blue) — Resets the challenge to its initial state.
• Extend time (grey/disabled) — Only active when less than 30 minutes remain.
• Stop (red) — Stops the running challenge.

URL types

When a challenge is running, you will see connection URLs in the challenge window. There are two types:

Good to know

Remember the rules