Offical URL:

Ho Ho Ho, it's that time of year where many people count down the days to Christmas.

Traditionally, an advent calendar is used which yields one piece of chocolate every day,
but here at OverTheWire, we feel that we can do better than that.
Instead of chocolates, we offer a fresh CTF challenge every day of December until Christmas!

Format: remote, team-based, jeopardy.
Difficulty: intermediate (a couple hours solving time per challenge on average)
Categories: web, re, pwn, crypto, misc
Contact (IRC): #advent @
Contact (Twitter): @OverTheWireCTF

More information as the event comes closer at

no logo

CTF events

OverTheWire Advent Bonanza 20210
OverTheWire Advent Bonanza 201923.06
OverTheWire Advent Bonanza 201823.06
Related tags: web pwn xss x86 php crypto stego rop forensics base64 ld_preload perl python net pcap xor fun rsa penetration testing z3 prime bruteforce c++ stack_pivot reverse engineering metasploit javascript programming c engineering security aes arm java vm exploitation node.js misc pwnable re sql exploit ppc steganography math nodejs obfuscated code-injection coding networking ruby mongodb http malware shell bash algorithms windows format-string unix network pentesting guessing social engineering padding sudoku html network hacking game linux recon wireshark googling formatstringexploiter analysis constraint side-channel lfi burpsuite kali easy bitshift pinhole morse socket assembly bitflipping code breaking reflection msb rev sca learning slacking kernel race condition hash radare2 git binaryexploitation pwning keyboard music shellcode overflow androidsecurity cellular ciphertexts application security algorithm os x oracle-padding clojure qr ssti osint reversing github cryptography-rsa compare jit emulation golang midi substitution data structure usb struggle passcracking angr patching encoding length rc4 coppersmith path-traversal paillier hexeditor qrcode cryptography complaining command_injection hash-length-extension reverse ecb partial-recovery heap powerpc binary invert rot13 bfs modular-root mathematics sdr homeland maze cybersecurity srp fault sha256 octal signature header syscall react webpack amp polyglot keylogger binary-exploitation dotnet restricted-bash easteregg linear_algebra privesc rowhammer aztec cowsay quine gnuradio tremaux keygen canary crytpography shift gamecube