CAPTURE THE FLAG
CTF
Challenges built out of the same bugs I get paid to find - authorization that trusts the caller, sanitisers with an off switch, two systems reading one request differently. Sign in, pick a board, bring back a flag.
ACCESS
Pick a handle
No password, no email needed, no confirmation step. You get a resume code to come back on another device — that is the whole account.
Checking for the CTF server…
SIGNED IN
?
-
unranked
YOUR RESUME CODE — SHOWN ONCE
-
Keep this. It is the only way back into this handle from another browser, and nobody can recover it for you — only its fingerprint is stored.
The board is open. Solved challenges stay solved.
YOUR SCORE
0
SOLVED
0/6
ON THE BOARD
0
POINTS IN PLAY
0
The board
Pick a challenge. Each one is a thing that really broke, rebuilt so you can break it too.
-
-
-
-
Scoreboard
Ties break on who got there first.
RANKNAMESOLVEDSCORE
Nobody on the board yet.