Unfoldd CTF 2026

Overview Think. Investigate. Exploit. Capture the Flag. Unfoldd CTF 2026 is a cybersecurity challenge designed for students, aspiring security researchers, developers, and cybersecurity enthusiasts who want to test their practical problem-solving and security skills. Participants will face a collection of challenges inspired by real-world cybersecurity concepts across multiple domains, including Web Security, Cryptography, Digital Forensics, OSINT, Reverse Engineering, Steganography, and Miscellaneous challenges. The objective is simple: analyse the challenge, find the vulnerability or hidden information, and submit the correct flag to earn points. What to Expect Hands-on cybersecurity challenges Multiple difficulty levels, from beginner to advanced Challenges across different cybersecurity domains Hints to help participants progress when required Live leaderboard and competitive scoring Opportunity to test practical security and problem-solving skills Eligibility Open to students and cybersecurity enthusiasts. Participants from any college, university, or academic background can participate. Prior cybersecurity experience is not mandatory, but basic knowledge of computers and the internet is recommended. Participants may participate individually or as part of a team, subject to the team-size rules specified for the event. Competition Format The event will be conducted as a Capture The Flag (CTF) competition. Participants will solve cybersecurity challenges and submit flags through the official CTF platform. Each challenge will carry a specified number of points based on its difficulty. The leaderboard will rank participants or teams based on their total score and applicable tie-breaking criteria. Challenges may cover Web Security, Cryptography, Digital Forensics, OSINT, Reverse Engineering, Steganography, and Miscellaneous categories. Rules All challenges must be solved through legitimate means. Participants must not attack, disrupt, or attempt to compromise the CTF infrastructure, scoreboard, hosting infrastructure, or other participants' systems. Do not perform denial-of-service attacks, automated abuse, credential attacks, or infrastructure-level attacks against the competition platform. Do not share flags, solutions, or challenge-specific answers with other participants during the competition. Do not attempt to gain unauthorised access to another participant's account or team. Only designated challenge targets and resources provided as part of the CTF may be tested. Participants must not intentionally disrupt the availability or integrity of the competition. Any attempt to exploit the competition infrastructure rather than the intended challenge may result in disqualification. Organisers reserve the right to investigate suspicious activity and disqualify participants or teams that violate the rules. Scoring & Tie-Breaking Participants or teams will be ranked primarily according to the total points earned. In case of a tie, the earlier achievement of the final score may be used as the tie-breaker. Important By participating in Unfoldd CTF 2026, participants agree to follow the competition rules and use the provided infrastructure responsibly. Get ready to think like an attacker, investigate like a forensic analyst, and solve like a security researcher.