A CTF-style security gauntlet: exploit, analyse and defend across web, binary and forensics.
Part 2 turns the competition inside out. Instead of building, teams break: web exploitation, reverse engineering, cryptography, network forensics and privilege escalation. Flags are worth escalating point values by difficulty, and a small number of high-value challenges decide the top of the table. Shortlisted teams advance to the final build round.
Points based
Each flag carries a fixed point value by difficulty. Ties are broken by the earliest time the score was reached.
Submit flags in the given format. A short write-up is required for challenges worth 300 points or more.
Released problems for this round.
A packet capture from a compromised workstation contains an exfiltration channel hidden in ordinary-looking traffic. Identify the channel and recover the transferred file.
Submission
Submit the flag and the recovered file hash.
Updates automatically as scores are entered.
Leaderboard Last updated just now · last score change 11 Sept 2026
Byte Force
TM-P2-0003
Null Pointers
TM-P2-0001
Segfault Society
TM-P2-0002
Kernel Panic
TM-P2-0004
Race Condition
TM-P2-0005
Stack Smashers
TM-P2-0006
No attachment — full statement above.
A staging application issues session tokens that look random but are not. Recover the signing scheme, forge an administrator session and read the flag from the admin panel. The target is provided as a sandboxed container.
Submission
Submit the flag plus a short write-up describing the weakness and a suggested fix.
No attachment — full statement above.