Nhnc Writeups 2026
15 challenges with 27 published solutions between them. The writeups for this event were found in public repositories. Each link is pinned to the commit it was read from.
Where these writeups liveWeb6
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
Login Page
3 official solutionsAlso written up in: hax1ng/nhnc-2026-writeups, hax1ng/nhnc-2026-writeups, hax1ng/nhnc-2026-writeups
67 Login Systems
2 official solutionsAlso written up in: hax1ng/nhnc-2026-writeups, hax1ng/nhnc-2026-writeups
Include
2 official solutionsAlso written up in: hax1ng/nhnc-2026-writeups, hax1ng/nhnc-2026-writeups
Tea Agent
2 official solutionsAlso written up in: hax1ng/nhnc-2026-writeups, hax1ng/nhnc-2026-writeups
Watching Tv
2 official solutionsAlso written up in: hax1ng/nhnc-2026-writeups, hax1ng/nhnc-2026-writeups
Farewell Include
1 official solutionAlso written up in: hax1ng/nhnc-2026-writeups
Cryptography3
Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.
Babyzkp
2 official solutionsAlso written up in: hax1ng/nhnc-2026-writeups, hax1ng/nhnc-2026-writeups
Talking To The Sun
2 official solutionsAlso written up in: hax1ng/nhnc-2026-writeups, hax1ng/nhnc-2026-writeups
Tearoam
1 official solutionAlso written up in: hax1ng/nhnc-2026-writeups
Reverse engineering3
Work out what a compiled program does without its source, then work backwards from the check to the input that passes it.
Confused Component
2 official solutionsAlso written up in: hax1ng/nhnc-2026-writeups, hax1ng/nhnc-2026-writeups
Whc2 V0.1
2 official solutionsAlso written up in: hax1ng/nhnc-2026-writeups, hax1ng/nhnc-2026-writeups
Homework
1 official solutionAlso written up in: hax1ng/nhnc-2026-writeups
Uncategorised3
The upstream scoreboard did not say, so neither do we.
I Love Proxy
2 official solutionsAlso written up in: zerodayhunterhere/ctf-writeups, zerodayhunterhere/ctf-writeups
Also written up in: zerodayhunterhere/ctf-writeups, zerodayhunterhere/ctf-writeups
Who is WHOIS
1 official solutionAlso written up in: e0sec/ctf-writeups