TraceBash CTF 2026
14 challenges with 18 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not.
Full task list on CTFtimeCryptography4
Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.
- cryptography
- tracebash
- writeup
- crypto
- ctf
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
- cryptography
- tracebash
- ctf
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
- cryptography
- tracebash
- writeup
- crypto
- ctf
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
- cryptography
- tracebash
- ctf
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
OSINT4
Answer a question about the real world from public sources. The work is pivoting between identifiers, not exploiting anything.
Also written up in: Ridful/CTF-Writeups
- tracebash
- ctf
- osint
Same technique in picoCTF: CVE-XXXX-XXXX
Also written up in: Ridful/CTF-Writeups
- tracebash
- ctf
- osint
Same technique in picoCTF: CVE-XXXX-XXXX
- tracebash
- ctf
- osint
Same technique in picoCTF: CVE-XXXX-XXXX
- tracebash
- ctf
- osint
Same technique in picoCTF: CVE-XXXX-XXXX
Binary exploitation2
Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.
- binary-exploitation
- tracebash
- ctf
- pwn
- binary
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
- binary-exploitation
- tracebash
- ctf
- pwn
- binary
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Uncategorised2
The upstream scoreboard did not say, so neither do we.
Bespoke Superblock
1 official solutionAlso written up in: Ridful/CTF-Writeups
Frequency Trap
1 official solutionAlso written up in: Ridful/CTF-Writeups
Web1
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
Also written up in: Ridful/CTF-Writeups
- api
- logic
- webexploitation
Same technique in picoCTF: secure-email-service, Live Art, No FA
Misc1
Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.
Also written up in: Ridful/CTF-Writeups
- rce
- command_injection
- webexploitation
Same technique in picoCTF: PW Crack 2, Permissions, Specialer