Abstract

An Indonesian 2023 Capture the Flag competition for 18-year-olds is looked at for the first time. We find Java Island, West, Central, and East Java, especially Malang City, have the highest concentration of young hackers. Despite improved infrastructure and knowledge, only a few are from Jakarta. The majority (80%) of young hackers are vocational students. Each winner is self-taught in hacking techniques. Students learn and discuss via underground group chat without any formal instructor. YouTube and training sites like PicoCTF and TryHackMe provide most of the necessary information and practice hacking skills. John Hammond’s channel on YouTube inspires these young Indonesian hackers. A programmer's background will expedite mastering hacking techniques. Lack of expertise and guts causes many contenders to quit early. Digital signatures, web hacking, network analysis, and OSINT are the hardest problems. School operating systems and file systems courses are sufficient. To increase cyber security skills, the ICT curriculum should include networking, online hacking, OSINT, and cryptography topics like digital signatures, especially in vocational schools.