Offical URL: https://g.co/ctf

Annual Capture The Flag hosted by the Google Security Team.

CTF events

NameWeight
Google Capture The Flag 202499.41
Google Capture The Flag 202399.74
Google Capture The Flag 202297.84
Google Capture The Flag 202199.22
Google Capture The Flag 202074.07
Google Capture The Flag 2019 (Finals)37.00
Google Capture The Flag 2019 (Quals)96.34
Google Capture The Flag 2018 (Finals)25.00
Google Capture The Flag 2018 (Quals)66.31
Google Capture The Flag 2017 (Finals)25.00
Google Capture The Flag 2017 (Quals)21.99
Google Capture The Flag 201621.99
Related tags: sqli re networking crypto reverse engineering python programming objective-c ios java bash msf packet analysis perl exploit pentest .net cracking shell http programing c++ exploitation penetration hacking coding ruby blackberry slacking forensics pwn misc googlectf formatstring analysis engineering social engineering network security bufferoverflow it all penetration testing c asm c writinglinuxsecuritymodule oshardening hardwaresecurity security pivoting bruteforce buffer overflows remote command execution html software engineering flask machine learning node kali linux android sql wireshark mitm windows sha1 scripting wifi cracking javascript arm api hooking opencv linux shellcode analysis malware analysis dex x86 scans things delphi web server debugging wordpress admin keygening nothing googling puzzles sandwiches cutting grass strimming edges logic hackingforglory stuff aws docker ansible irc recon reversing pwning vulnerability computers go pytho operations passive recon problem solving idea secure-coding cuda csrf firensic microsoft publisher microsoft access read russian forensic stego nobigdeal sqlmap reverse homework angr mobile elf steganography volatility rekall lcg pil pcap usb pickle google cookie dos sniff adb pentesting padding-oracle hash-length-extension rsa pkcs1.5 fractions hash md5 stegano xor patching xmldecoder compression automatization cesar ciphertexts hql hibernate twitter trivia serialize xml encoding overflow heap xss js radare2 dna prng caploader tech objdump carving network bleichenbacher symbolic pwnable number theory gdb rev ppc #stego exploits sqlinjection kali code-injection research kernel filesystem ld_preload cryptography-rsa crytography cryptanalysis csharp # mips ctf math algorithms forensic+crypto otp sympy binary linuxbasic fuzzing rtfm metadata haskell qrcode gaming sleeping miscellaneous session lfi angular easy joe rop csp fibonacci cubeing rubik crc vm hailstone assembler race-condition protobuf apk sandbox utf-16be pkcs injection rawsec php meepwn 2017 wiener pwntools reverse_engineering css hardware malware jualobataborsiasli obatcytotecasli net dnspy cryptography rsa-crypto parsing zip unicode crytography-rsa format-string rust systems debugger python3 aes-cbc basic logic-analyzer 8-bit atari cssinjection com msdos fst template-injection ecdh curve25519 birthday collision aes-ctr lsb-oracle anti-debugging ptrace lsb fallthrough hooking module smali native davies-meyer des frida caesar dynelf c64 seccomp mmap obfuscated braille keylogger commodore64 retro png jni prg anti-debug pdf nc lfsr crc64 obataborsiampuh header recaptcha selfinjection switches cookies lsb-stego shellcode 800 webexp binaryexploitation captcha use-after-free ciphers skills general baby tcache game jail drm chrome mitigation optimization assembly language info-leak youtube dsp embedded keys lockpicking tcp proxy websec modular-arithmetic iot log4j information based leak time fastbin grpc unseralization sbox oracle welcome rng beginner ntfs circuit z3 imagemagick xxe 2019 qkd compiler sniffing bof rbash getfattr strings fermat lattice beer aes code-golf np-complete verilog 8051 i2c bb84 quantum oob decompile enter space token image cat jadx ida lll coppersmith pattern cache cpu jualobataborsi boolean soikeo pow rce upx cryptojs artificialintelligence ai reverse-engineering bin memory general_skills looking_confused guessing bongda barcode midi loopover qunatum heap-overflow images _libc_start_main modding htb pyjail hacker avr arduino gnuradio sha256 acpi syscall symbolic_execution printf primes factoring sat prototype-pollution racecondition timing-attack capturetheflag.withgoogle.com gdbscript nodejs idapython prototypepollution clobbering floating-point side-channel dom-clobbering ltrace sphincs+ pqcrypto node.js namespace unintended bst escape preproccessor aegis browser polynomials dotnet cas ast realworldctf unintended-solution deserialize cpp functional ssrf prog osint phishing ssti arm64 sql-injection pyc obfuscation audio intel amqp robots.txt user-agent aarch64 generalskills polynomial crt rsa-crt exiftool canary multi-stage multistage stack relro pie soundness client-side raid5 c-pre-processor bpf v8 chromium collatz-conjecture aes-gcm nonce z80 ropchain native-library tls x86-64 huffman-tree deflate googlectf2021 sfdfgh bytecode decorator neural networks pollard-p-1 totient-function eeprom laser hid git appnote inspect-element headers blindsql filter xml-injection intro buffer-overflow discord survey testcgi test exploit/linux reversing/linux ics cloud ir misc/quantum medium hard random ecc chess regex sharedlibraries nativelibraries javascriptinterface redis file_upload express systemverilog beginner_friendly jwt codeql jpeg arbitrary-write graphs mj0ln1r invaders0x1 avatar2