Tcm Noob Village Ctf 2026
17 challenges with 17 published solutions between them. The writeups for this event were found in public repositories. Each link is pinned to the commit it was read from.
Where these writeups liveUncategorised12
The upstream scoreboard did not say, so neither do we.
Anomalous Login Detection
1 official solutionAlso written up in: krnlbash/tcm-noob-village-ctf-2026
Cleartext Credentials Pcap
1 official solutionAlso written up in: krnlbash/tcm-noob-village-ctf-2026
Deleted Secrets In History
1 official solutionAlso written up in: krnlbash/tcm-noob-village-ctf-2026
Dns Exfiltration Chunks
1 official solutionAlso written up in: krnlbash/tcm-noob-village-ctf-2026
Dns Txt Record Flag
1 official solutionAlso written up in: krnlbash/tcm-noob-village-ctf-2026
Ghost Process Beacon
1 official solutionAlso written up in: krnlbash/tcm-noob-village-ctf-2026
Macro Aggression Docx Deobfuscation
1 official solutionAlso written up in: krnlbash/tcm-noob-village-ctf-2026
Ntlm Hash Dump
1 official solutionAlso written up in: krnlbash/tcm-noob-village-ctf-2026
OperationBreadcrumbs
1 official solutionAlso written up in: AKapaldo/CTF-Writeups
ProjectHelix
1 official solutionAlso written up in: AKapaldo/CTF-Writeups
Robots Txt Staging Exposure
1 official solutionAlso written up in: krnlbash/tcm-noob-village-ctf-2026
Wayback Machine Beta Code
1 official solutionAlso written up in: krnlbash/tcm-noob-village-ctf-2026
Web2
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
Cookie Based Access Control
1 official solutionAlso written up in: krnlbash/tcm-noob-village-ctf-2026
Jwt Secret Disclosure
1 official solutionAlso written up in: krnlbash/tcm-noob-village-ctf-2026
Forensics1
Recover something from a file, a capture, or a disk image - often from a part of it the format says is unused.
Pdf Hidden Metadata
1 official solutionAlso written up in: krnlbash/tcm-noob-village-ctf-2026
Reverse engineering1
Work out what a compiled program does without its source, then work backwards from the check to the input that passes it.
String Extraction
1 official solutionAlso written up in: krnlbash/tcm-noob-village-ctf-2026
Cryptography1
Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.
Vigenere Cipher
1 official solutionAlso written up in: krnlbash/tcm-noob-village-ctf-2026