DiceCTF 2026 Finals

What to have open when it starts

• Misc

  Misc is whatever did not fit, which in practice means encodings and esolangs. Identify, do not guess.

  • Cipher identifier and automatic decoder
  • Recipe builder: chain decodes and transforms
  • Brainfuck and esolang decoder
  • Base64 decoder and encoder
  • Regex tester with match offsets and capture groups

  New to this? Read Recognising encodings, Misc and esoteric languages

• Crypto

  Have the cipher identifier open on the first paste. Most of the round-one crypto is a classical cipher or an RSA parameter mistake, and both are recognised faster than they are solved.

  • Cipher identifier and automatic decoder
  • RSA decryption and attack runner
  • XOR cipher decoder and key recovery
  • Vigenere cipher solver with automatic key recovery
  • Modular arithmetic and number theory toolkit

  New to this? Read Classical ciphers and frequency analysis, XOR and the cost of reusing a key, RSA and the parameters that break it

• Pwn

  Get the offset and the libc base mechanically, so the thinking is spent on the chain rather than on arithmetic.

  • Cyclic pattern generator and offset finder
  • Buffer overflow offset finder
  • Libc base address calculator
  • ROP gadget finder
  • Pwntools exploit script generator

  New to this? Read Binary exploitation

• Web

  Read the token before you read the source. A session cookie that decodes is the shortest path through half the web board.

  • JWT decoder and signature verifier
  • Flask session cookie decoder
  • HTTP request replayer
  • Directory and path scanner
  • HTTP security header analyzer

  New to this? Read Web attacks and session tokens