WEB / 3 CHALLENGES
01
Web exploitation
An API with misplaced trust, a strange session cookie and a service that says too much.
root@zagreb:~$ cat /ctf
CTF_
Find the flaw. Follow the evidence. Capture the flag. Bring a laptop and a stubborn streak.
SAMPLE EDITION / illustrative text • real BSides Zagreb 2026 photos
[01] /ctf
Challenge accepted.
A sample jeopardy-style playground for curious beginners and experienced puzzle breakers.
DFIR / 3 CHALLENGES
02
Forensics
Read the disk image, reconstruct the timeline and find the one artefact that changes the story.
REV / 3 CHALLENGES
03
Reverse engineering
A tiny binary, a custom protocol and a secret hiding in plain sight.