R3CTF 2026
7 challenges with 8 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not.
Full task list on CTFtimeWeb2
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
- web
- ctf
- r3ctf
Same technique in picoCTF: Live Art, secure-email-service, No FA
- web
- ctf
- r3ctf
Same technique in picoCTF: Live Art, secure-email-service, No FA
Misc2
Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.
Also written up in: blog.kelte.cc
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
- misc
- r3ctf
- ctf
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
Cryptography1
Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.
- cryptography
- r3ctf
- ctf
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
Forensics1
Recover something from a file, a capture, or a disk image - often from a part of it the format says is unused.
- r3ctf
- ctf
- forensics
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r
Uncategorised1
The upstream scoreboard did not say, so neither do we.
TsukiRythmGame
1 official solutionAlso written up in: danghieu0411/CTF-WriteUp