Card Trick — DalCTF 2026

A trivia/OSINT puzzle: identify Valve’s unreleased game Deadlock and the hero Wraith, then read the shipped ability data (Card Trick) from the community API to get the suit order, max-level stat modifiers, and card-charge count for the flag.

June 7, 2026 · 7 min · 1470 words · Th3B0yWh0L1v3d

Lost My Flag Printer — DalCTF 2026

A setuid helper pins an eBPF flag-printer into a world-accessible PROG_ARRAY then chmod 000s the program pin; loading an unprivileged socket-filter that bpf_tail_calls index 0 runs the root-loaded printer and fills the readable flag map.

June 7, 2026 · 10 min · 2061 words · Th3B0yWh0L1v3d

someone said steg? — DalCTF 2026

A 16-frame APNG hides one flag character per frame in the top-left pixel of each frame’s decompressed scanline data; every standard stego avenue is a dead end, so decompressing all 16 fdAT/IDAT streams and reading byte 4 of each yields the flag.

June 7, 2026 · 7 min · 1391 words · Th3B0yWh0L1v3d