2026found by harvest
upCTF 2026
5 challenges with 5 published solutions between them. No writeups were ever filed against this event's listing, so its solutions were found in public repositories instead. Each link is pinned to the commit it was read from.
The event listingWeb4
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
Solve it with:JWT decoder and signature verifierJWT alg=none bypass generatorWeb attack payload catalogJWT secret brute forceLearn: Sessions, tokens and access control
0dayonip
1 official solutionAlso written up in: vivekbhandarisec/ctf-writeups
mAuth
1 official solutionAlso written up in: vivekbhandarisec/ctf-writeups
Microsoft Axel
1 official solutionAlso written up in: vivekbhandarisec/ctf-writeups
Post Builder
1 official solutionAlso written up in: vivekbhandarisec/ctf-writeups
Misc1
Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.
Solve it with:Brainfuck and esolang decoderCipher identifier and automatic decoderRegex tester with match offsets and capture groupsLearn: Recognising encodings
Deoxyribonucleic
1 official solutionAlso written up in: vivekbhandarisec/ctf-writeups