2026from the authors’ own sites

KaliTeam CTF 2026

4 challenges with 4 published solutions between them. CTFtime has no listing for this event at all, so nothing built on CTFtime can show what it was made of. These writeups were found on the authors’ own sites instead.

Where these writeups live

Cryptography1

Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.

Solve it with:Cipher identifier and automatic decoder Vigenere cipher solver with automatic key recovery RSA decryption and attack runner Wiener’s attack on small RSA private exponents In-browser hash cracker with rule transforms Learn: Classical ciphers and frequency analysis Learn: RSA and the parameters that break it

Merkle's Trapdoor Knapsack Exhaustive Enumeration
1 official solution

Web1

Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.

Solve it with:JWT decoder and signature verifier JWT alg=none bypass generator Web attack payload catalog JWT secret brute force Learn: Web attacks and session tokens

PHP Redirect Body Leak & User Agent Gate Bypass
1 official solution

Binary exploitation1

Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.

Solve it with:ROP gadget finder Shellcode assembler and library Cyclic pattern generator and offset finder Format string exploit builder Learn: Binary exploitation

Player, Leaky & Raryray
1 official solution

OSINT1

Answer a question about the real world from public sources. The work is pivoting between identifiers, not exploiting anything.

Solve it with:EXIF metadata viewer QR code decoder

The Unbroken Shelf & Guests
1 official solution

Other 2026 events