CRACKTHE CODE CTF EXTENDED

Test your skills. Outsmart the challenges. Uncover vulnerabilities and compete to claim the flag. Think your squad can crack them all? Prove it.

OPERATION BEGINS IN

00
DAYS
00
HRS
00
MIN
00
SEC

ORGANIZED BY

University of Mindanao | College of Computing Education

University of Mindanao | College of Computing Education: Skills Clinic

OPERATOR TABLET

> connect schale.cte:1337

handshake ............ OK

> auth --squad SENSEI_04

access granted

> ls /missions

web crypto forensics osint general pwn

> cat flag.txt

permission denied. crack it.

REGISTRATION OPENORGANIZED BY UNIVERSITY OF MINDANAO COLLEGE OF COMPUTING EDUCATIONOPEN TO ALL CCE STUDENTSUNIVERSITY OF MINDANAO COLLEGE OF COMPUTING EDUCATION: SKILLS CLINICJEOPARDY-STYLE

MISSION SELECT

Choose your field

FIELD 01

/missions/web

Web Exploitation

Identifying and exploiting vulnerabilities in web applications.

EXPECT

SQLiXSSIDOR

FAQ

Before you enlist

Read the Rules for the full details.

01Who can join?

All students currently enrolled in the College of Computing Education (CCE). Every member of a team must be a currently enrolled CCE student.

02How many members can a team have?

One (1) to four (4) members. Teams must register their team name and all members before the announced deadline.

03What does a flag look like?

The standard format is CTC{string_here} unless otherwise specified in the challenge description. Submissions are case-sensitive.

04What should we bring?

A laptop for each member is highly recommended, though sharing laptops within the team is allowed. Each team must bring their own extension cords.

05Which tools are allowed?

Only free, open-source, or community-edition tools (e.g., Kali Linux, Burp Suite Community, Wireshark, Python). Premium or paid software is prohibited, and so are AI/LLM tools such as ChatGPT, Claude, GitHub Copilot and Gemini.

06Can we use the internet?

Yes, for documentation and technical references, as long as it does not violate the communication, AI, or cloud storage rules. VPNs, Private/Custom DNS, messaging apps and headsets are not allowed.