montrehack.ca

What It Is

MontréHack is a community event centered on monthly Capture-The-Flag problem solving and cybersecurity workshops. Based on the article, the next event is scheduled for April 15, 2026, at École de Technologie Supérieure (ÉTS) D-4007 in Montreal, Canada. Demos can also be watched on Twitch, and participants can join individually or in teams via Discord. It is not a traditional firewall, EDR, WAF, or vulnerability management product; rather, it is a CTF community event focused on security learning and hands-on practice.

Core Capabilities and Format

This session’s theme is “WASM my kind of web challenge,” built around the PolyPwn 2026 LabOps track. The goal is to write a keygen for a lab management web application compiled to WebAssembly. Different pages in the application correspond to license tiers such as Bronze, Silver, and Gold, and participants must generate valid licenses to unlock the flags. The article explicitly requires the use of Ghidra and ghidra-wasm-plugin, indicating that the event leans toward reverse engineering, WASM analysis, and understanding web application licensing logic. The event follows a workshop format: participants bring their own laptops, analyze the challenge in groups, and present the solutions at the end, creating a fairly complete learning loop.

Pricing, Compliance, and Enterprise Capabilities

The article does not disclose any registration fee, membership fee, or business model beyond sponsorship, nor does it mention payment methods, so pricing cannot be assessed. There is also no information about compliance certifications, enterprise management, alerts, auditing, SLAs, or similar capabilities. In terms of integrations, the only confirmed tooling is the use of a Ghidra plugin, with online collaboration and viewing relying on Twitch and Discord.

Pros, Cons, and Best-Fit Users

Its strengths are its hands-on nature, support for both in-person and online participation, the option to work individually or in teams, and the final walkthrough of the answers. It is well suited to people who want to improve their CTF, reverse engineering, and WASM security analysis skills. Its limitations are that it is not a security protection platform and cannot replace enterprise security products; the in-person venue is fixed in Montreal, which is inconvenient for users in China or other regions; and this particular session requires some reverse engineering background, so complete beginners may need to prepare in advance.

Access from China and Alternatives

The article does not state whether it is accessible from mainland China. Since the online components rely on Twitch and Discord, actual accessibility may be uncertain, so it should be marked as unknown. If stable participation is not possible, alternatives include CTF training platforms such as Hack The Box, TryHackMe, and picoCTF, or domestic platforms such as XCTF and BUUCTF.