UofTCTF 2026
UofTCTF 2026 is the annual capture-the-flag competition organized by the UofTCTF team. This year’s event will take place online from January 9, 2026, at 7:00 PM EST to January 11, 2026, at 7:00 PM EST. It will be a jeopardy-style CTF with classic categories like web, pwn, crypto, rev, forensics, and misc.
Join the event discord server: https://discord.gg/4mQP8Tk3JE
Thank you to our generous sponsors, without whom we could not run this event: - Dataflow Security - Zellic - Offsec - Binary Ninja - BugCrowd - KPMG Canada - Appsurent - UofT ITS - UofT DCS
Infra sponsored by goo.gle/ctfsponsorship
Web 9
| Challenge | Has |
|---|---|
| Firewall | files |
| No_Quotes | files |
| No_Quotes_2 | files |
| No_Quotes_3 | files |
| Pasteboard | files |
| Personal_Blog | files |
| Unrealistic_Client_Side_Challenge_Flag_1 | files |
| Unrealistic_Client_Side_Challenge_Flag_2 | files |
| Vulnerability_Research | files |
Pwn 5
| Challenge | Has |
|---|---|
| AES_AEAD | files |
| Baby_bof | files |
| Calculator | files |
| extended_eBPF | files |
| uprobe | files |
Reverse 5
| Challenge | Has |
|---|---|
| Baby_Obfuscated_Flag_Checker | files |
| Bring_Your_Own_Program | files |
| ML_Connoisseur | files |
| Symbol_of_Hope | files |
| Will_u_Accept_Some_Magic | files |
Crypto 7
| Challenge | Has |
|---|---|
| Gamblers_Fallacy | files |
| Leaked_d | files |
| MAT247 | files |
| MAT347 | files |
| Orca | files |
| Rotor_Cipher | files |
| UofT_LFSR_Labyrinth | files |
Forensics 2
| Challenge | Has |
|---|---|
| Baby_Exfil | files |
| My_Pokemon_Card_is_Fake | files |
Misc 8
| Challenge | Has |
|---|---|
| Encryption_Service | files |
| File_Upload | files |
| Guess_The_Number | files |
| KandK_Training_Room | files |
| Lottery | files |
| Nothing_Ever_Changes | files |
| Reverse_Wordle | files |
| Vibe_Code | files |
OSINT 3
| Challenge | Has |
|---|---|
| Go_Go_Cabinet | files |
| Go_Go_Coaster | files |
| My_Shikishi_is_Fake | files |