Hidden But Definitely Not
Recovering a flag hidden via stack-string construction and XOR obfuscation.
BoroCTF-2026
No writeups match your filter.
Kobeni's Dashboard
Abusing ImageMagick’s SVG text: pseudo-coder to read the flag file via server-side image conversion.
Mania
Use-after-free on a tcache chunk to overwrite a function pointer and call win().
Nature's Takeover
Identify the abandoned ship overgrown with vegetation from an OSINT image — SS Ayrfield.
Neural Sync Portal
SSRF via Docker internal hostname to reach the metadata service and retrieve the flag.
New to the Format
Blind format-string exploit with ASLR off: leak stack address then use %n + call rax to redirect execution.
Next Challenge (VULNBOT)
Reverse-psychology logic puzzle: telling the bot the flag IS the answer gets you the flag.
Not the Flag
Apply bitwise NOT to a hex string to reveal the flag.
Not Your Time
Crackme that stores the bitwise NOT of the flag bytes; invert them to get the flag.
Perfectly Destructive File
Extracting a flag hidden inside a PDF stream using FlateDecode and base64.