Midnight Sun CTF 2026/Quals justcauseMidnight Sun CTF 2026 — Quals justcauseTeam: rawpayload · CTFtime rating: not rated · Source: https://ctftime.org/writeup/40812MiscBlogJun 3, 2026
plfanzen CFT 2026/forgetfulplfanzen CFT 2026 — forgetfulTeam: TCP1P · CTFtime rating: not rated · Source: https://ctftime.org/writeup/40813 · Topics: cryptoCryptoGitHub#cryptoJun 3, 2026
plfanzen CFT 2026/Cryptografieplfanzen CFT 2026 — CryptografieTeam: TCP1P · CTFtime rating: not rated · Source: https://ctftime.org/writeup/40814MiscGitHubJun 3, 2026
TRX CTF 2026/house-of-fishingTRX CTF 2026 — house-of-fishingTeam: Pwnissa · CTFtime rating: not rated · Source: https://ctftime.org/writeup/40815MiscBlogJun 3, 2026
Hackअस्त्र/Misc - Beta AppHackअस्त्र — Misc - Beta AppTeam: Team0Skills · CTFtime rating: not rated · Source: https://ctftime.org/writeup/40816 · Topics: cloudMiscGitBook#cloudJun 3, 2026
Hackअस्त्र/Web - SwagHackअस्त्र — Web - SwagTeam: Team0Skills · CTFtime rating: not rated · Source: https://ctftime.org/writeup/40817 · Topics: confusion, jwt, algorithmMiscGitBook#confusion#jwt#algorithmJun 3, 2026
Hackअस्त्र/Web - Mission ControlHackअस्त्र — Web - Mission ControlTeam: Team0Skills · CTFtime rating: not rated · Source: https://ctftime.org/writeup/40818 · Topics: xss, stored, botMiscGitBook#xss#stored#botJun 3, 2026
HASBLCTF26/T/I ForumHASBLCTF26 — T/I ForumTeam: Abdelkader · CTFtime rating: not rated · Source: https://ctftime.org/writeup/40819 · Topics: hacking, websec, ctf, abdelkaderWebBlog#hacking#websec#ctfJun 3, 2026
HASBLCTF26/baby-counting-fingersHASBLCTF26 — baby-counting-fingersTeam: Abdelkader · CTFtime rating: not rated · Source: https://ctftime.org/writeup/40824 · Topics: writeup, ctf, cracking, cryptography, cryptoCryptoBlog#crypto#cracking#ctfJun 3, 2026
Root-Me/CRLF·20ptsCRLF — Root-MeChallenge CRLF on HTTP plumbing and template engines.Webhard#web#root-me#hardMay 26, 2026
Root-Me/API - Mass Assignment·20ptsAPI - Mass Assignment — Root-MeChallenge API - Mass Assignment on HTTP plumbing and template engines.Webhard#web#root-me#hardMay 26, 2026
Root-Me/File upload - Double extensions·20ptsFile upload - Double extensions — Root-MeFor File upload - Double extensions, the backend trusts headers and cookies too much.Webhard#web#root-me#hardMay 26, 2026
Root-Me/HTTP - Directory indexing·15ptsHTTP - Directory indexing — Root-MeServer-side web task HTTP - Directory indexing.Webmedium#web#root-me#mediumMay 26, 2026
Root-Me/Nginx - Alias Misconfiguration·15ptsNginx - Alias Misconfiguration — Root-MeFor Nginx - Alias Misconfiguration, the backend trusts headers and cookies too much.Webmedium#web#root-me#mediumMay 26, 2026
Root-Me/API - Broken Access·15ptsAPI - Broken Access — Root-MeServer-side web task API - Broken Access.Webmedium#web#root-me#mediumMay 26, 2026
Root-Me/HTTP - POST·15ptsHTTP - POST — Root-MeServer-side web task HTTP - POST.Webmedium#web#root-me#mediumMay 26, 2026
Root-Me/Backup file·15ptsBackup file — Root-MeServer-side web task Backup file.Webmedium#web#root-me#mediumMay 26, 2026
Root-Me/HTTP - Open redirect·10ptsHTTP - Open redirect — Root-MeServer-side web task HTTP - Open redirect.Webeasy#web#root-me#easyMay 26, 2026
Root-Me/PHP - Command Injection·10ptsPHP - Command Injection — Root-MeServer-side web task PHP - Command Injection.Webeasy#web#root-me#easyMay 26, 2026
Root-Me/Weak password·10ptsWeak password — Root-MeFor Weak password, the backend trusts headers and cookies too much.Webeasy#web#root-me#easyMay 26, 2026