Offical URL: https://midnightsunctf.com/

Midnight Sun CTF is HackingForSoju's annual CTF event to promote competition around the world.

On site finals in Stockholm, Sweden during the peak summer period in June when the sun is visible in the middle of the night.

Supported categories are: Pwn, Reverse, Web, Crypto, Misc.

https://discord.gg/xMuRxub4CX

CTF events

NameWeight
Midnight Sun CTF 2026 Quals48.17
Midnight Sun CTF 2025 Finals100.00
Midnight Sun CTF 2025 Quals53.00
Midnight Sun CTF 2024 Finals100.00
Midnight Sun CTF 2024 Quals35.74
Midnight Sun CTF 2023 Finals90.00
Midnight Sun CTF 2023 Quals35.91
Midnight Sun CTF 2022 Finals76.83
Midnight Sun CTF 2022 Quals27.82
Midnight Sun CTF 2021 Finals52.92
Midnight Sun CTF 2021 Quals50.32
Midnight Sun CTF 2020 Finals37.00
Midnight Sun CTF 2020 Quals37.00
Midnight Sun CTF 2019 Finals25.00
Midnight Sun CTF 2019 Quals24.88
Midnight Sun CTF 2018 Finals25.00
Midnight Sun CTF 2018 Quals24.88
Related tags: web pwn xss x86 php bin crypto stego rop sqli forensics gpg android python mips net xor hidden rsa elf bruteforce algebra exec decode javascript debugging aes arm java js .net exploitation misc vernam pwnable re sql joy exploit ppc steganography things scripting security programming metasploit c c++ reverse engineering penetration testing hacking organization math sandbox coding nothing networking ruby injection http engineering penetration malware exploits cracking pentest bash sex algorithms windows stuff network cooking pentesting guessing html game linux all recon googling analysis app rfi sqlinjection lfi fuzzing assembly language sql injection pyjail technical assembly code miscellaneous malware analysis sleeping blind got competitive programming low level csharp learning computers cisco nmap awesome kernel crackme hardware maths exploiting automation embedded hash radare2 audio git wifi databases yum webex misconfiguration bof emails pwning music flask machine learning shellcode malloc wiener androidsecurity vulnerability analysis dns cloud radio retro dos application security secure code review application penetration testing apk regex vlan win owasp securtity electronics aws data structure data science acm-icpc world champion md5 warmup cross site scripting rust crytography stenography pdf patching sec geoip pie cypher xposed pene cryptanalysis nx esoteric-language printf pcaps pickle glibc compression seccomp heap zlib proxy cookie zkp string-format dsa sans steganalysis waf basketball c reverse padding-oracle cryptography reversing rev kali collision hmac authentification ld_preload forensic stack_pivot binary reconaissance - ctf race # command pgp hastad coredump online heap-feng-shui esp32 adc cryptography-rsa reverse_engineering writeups aes-cbc osint ssti fsb off-by-one hackit nullcon revesing ecdsa insert forensic+crypto crc32 binaryexploitation race-condition pe webshell jwt csp scapy beginner bitflipping side-channel format-string emulation 16-bit mbr signals blockchain decompile qemu websec fortify fmstr iodine openvpn baby python3 ssrf ropchain crlfinjection bfs secret-sharing sha256 signature bpf preimage update csp-bypass polyglot shamir interpolation imagetragic opengraph dga avr pyc nginx welcome aarch64 youtube arbitrary-read dotnet asp file_structure esolang sanity rowhammer xxe bash_jail command-injection svg phar alias evilbits evil got-overwrite speedrun spectre pwned rng website schnorr zajebiste snake_oil rockyou crlf keygen zahjebischte zaj cyberchef crlf-injection snake pwned! firebase sidh checkin fini_array bluetooth stegsolve ret2win aegis canbus google-cloud gcp 2.32 deserialization hamming_code dnsexfiltration userfaultfd ew bien srand old_tech hw partial-private-key callstack stack-pivot autorop game-hacking 123movies movie reveng wordle quend calaquendi44 oldisnew notweb tricky ttl death auto jiatan ldd 420