SUCTF 2026
19 challenges with 19 published solutions between them. No writeups were ever filed against this event's listing, so its solutions were found in public repositories instead. Each link is pinned to the commit it was read from.
The event listingReverse engineering7
Work out what a compiled program does without its source, then work backwards from the check to the input that passes it.
SU Easygal
1 official solutionAlso written up in: hax1ng/suctf-2026-writeups
Su Lock
1 official solutionAlso written up in: hax1ng/suctf-2026-writeups
SU MvsicPlayer
1 official solutionAlso written up in: hax1ng/suctf-2026-writeups
Su Old Bin
1 official solutionAlso written up in: hax1ng/suctf-2026-writeups
Su Protocol
1 official solutionAlso written up in: hax1ng/suctf-2026-writeups
SU Revird
1 official solutionAlso written up in: hax1ng/suctf-2026-writeups
SU West
1 official solutionAlso written up in: hax1ng/suctf-2026-writeups
Web6
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
Su Cmsagain
1 official solutionAlso written up in: hax1ng/suctf-2026-writeups
Su Note
1 official solutionAlso written up in: hax1ng/suctf-2026-writeups
SU sqli
1 official solutionAlso written up in: hax1ng/suctf-2026-writeups
su Thief
1 official solutionAlso written up in: hax1ng/suctf-2026-writeups
Su Uri
1 official solutionAlso written up in: hax1ng/suctf-2026-writeups
Su Wms
1 official solutionAlso written up in: hax1ng/suctf-2026-writeups
Binary exploitation4
Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.
Chronosring
1 official solutionAlso written up in: hax1ng/suctf-2026-writeups
Su Chronosring1
1 official solutionAlso written up in: hax1ng/suctf-2026-writeups
SU evbuffer
1 official solutionAlso written up in: hax1ng/suctf-2026-writeups
Subox
1 official solutionAlso written up in: hax1ng/suctf-2026-writeups
Cryptography1
Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.
SU Isogeny
1 official solutionAlso written up in: hax1ng/suctf-2026-writeups
Misc1
Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.
Su Whoistheif
1 official solutionAlso written up in: hax1ng/suctf-2026-writeups