Thank you all for playing! We hope you had as much fun playing as we had organizing!

Congratulations to our winners:

  1. Rudolfos Toddlers
  2. HackThisSite
  3. Made In MIM

See you all in a bit at the Chaos West Stage!

How do integers work?

Hi CTFers,

whether you captured a flag or not, join us at the Chaos West Stage at 21:30 local time. We'll announce the winners and have some beers together!

See you there!

For the basic authentication step: Have you checked out A1 in your list? And the HTTP response headers?

I like this site: quite useful sometimes. Maybe you will find it useful too?

Gift Shredder (pwn) has been released

All pwnables are running on an up-to-date Ubuntu 17.10. The libc can be downloaded here

See challenge description

See challenge description.

This fix makes it even easier. Sorry for the f-up.

Gift Wrapping Factory 2.0 has been released

We are proud to announce that 34C3 CTF will have a junior version this year (also online!). This means that alongside the main event, there will be a separate scoreboard with an easier set of challenges.

What is a CTF and why you should I play it?

A good overview can be found here!

Who can play?

Everyone! There will be no shared challenges with the main contest, so you can play either one, or even both. However, we recommend the junior version for

  • people interested in infosec, who have not played CTF before;
  • CTF players who found the last year's CTF just a bit too hard to be fun;
  • CTF players who want to get better at categories they don't usually work on during CTFs.

While the main contest will have a strict no-hinting policy, for the junior version we can be a bit more helpful, so ask us questions in IRC or come swing by our area at the 34th Chaos Communication Congress. During the CTF, we will have people on-site that can help you get started and deal with problems.

There will be pwnage here as well!

Time: The contest will run for 48 hours, from Dec 27th, 20:00 UTC to Dec 29th, 20:00 UTC.


Contact: Ask for mal_ in IRC or on-site.

Twitter: @EatSleepPwnRpt

Infrastructure sponsored by Google Cloud