2026from public repositories
KCSC Recruitment 2026
10 challenges with 10 published solutions between them. The writeups for this event were found in public repositories. Each link is pinned to the commit it was read from.
Where these writeups liveWeb10
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
Solve it with:JWT decoder and signature verifierJWT alg=none bypass generatorWeb attack payload catalogJWT secret brute forceLearn: Sessions, tokens and access control
Bay Vien Bi Rong
1 official solutionAlso written up in: m1ngt/WriteUp-CTF
Horis Blog
1 official solutionAlso written up in: m1ngt/WriteUp-CTF
Hoshino Portal
1 official solutionAlso written up in: m1ngt/WriteUp-CTF
Ka Ce Et Ce
1 official solutionAlso written up in: m1ngt/WriteUp-CTF
Ka Ce Et Ce Revenge
1 official solutionAlso written up in: m1ngt/WriteUp-CTF
Santas Shop
1 official solutionAlso written up in: m1ngt/WriteUp-CTF
Santas Shop Revenge
1 official solutionAlso written up in: m1ngt/WriteUp-CTF
SECURE SHARE
1 official solutionAlso written up in: m1ngt/WriteUp-CTF
Silver
1 official solutionAlso written up in: m1ngt/WriteUp-CTF
Simple Web
1 official solutionAlso written up in: m1ngt/WriteUp-CTF