Problem statements

Problems

Statements unlock in stages. Anything not yet released stays hidden until the organisers publish it.

PartAll Part 1 Part 2 Part 3

CategoryAll Data Structures Forensics Graphs Web Exploitation

DifficultyAll Easy Medium Hard Expert

StatusAll Upcoming Active Closed

Showing 1 of 4 released problems

P2-WEB-01

MediumActive

Broken Token

Web ExploitationCybersecurity Hackathon300 pts

A staging application issues session tokens that look random but are not. Recover the signing scheme, forge an administrator session and read the flag from the admin panel. The target is provided as a sandboxed container.

Submission

Submit the flag plus a short write-up describing the weakness and a suggested fix.

Released: Released 13 Sept 2026, 09:00
Deadline: Due 13 Sept 2026, 21:00

No attachment — full statement above.