Remember touch grass from last year? Expect touch grass 2 this year! corCTF is the only CTF that cares about the health of the hacker community and forces all of you outdoors! 2024.cor.team 🏞️☀️🌳

We heard a lot of BSODs happened this past week because of a little coding oopsies from CrowdStrike We always were known Linux kernel hacking, but get ready for a Windows kernel pwnable this time against our home-rolled antivirus👀 Come register at 2024.cor.team!

Oops, we went way over budget and have to host a particular challenge on this junk setup 😩 To find out which challenges you can pwn here, come sign up for 2024.cor.team!

corCTF 2024 begins in 24 hours 🚨🚨🚨 If you haven't already registered, what are you doing? Go to 2024.cor.team now!!! We have more than 4k USD worth of prizes, and the champion automatically qualifies to DiceCTF Finals 2025 😮

It's halfway through corCTF 2024! There are still 3 unsolved pwn challenges, 2 unsolved web challenges, and 1 unsolved misc challenge (with many up for 🩸 bounties). Join us at 2024.cor.team !

Check out Jammy 's forensic challenge writeups from corCTF 2024! cor.team/posts/corctf-2… cor.team/posts/corctf-2…

Check out Drakon's corCTF 2024 writeup for his Chromium extension challenge "corctf-challenge-dev" 🕵️ cor.team/posts/corctf-2…

Checkout FizzBuzz101's corCTF 2024 challenge writeups! Leaking Flags from Initramfs with Spectre v1: willsroot.io/2024/08/just-a… KVM Escape from a nested L2 guest to the L1 hypervisor: willsroot.io/2024/08/trojan…

We took third place at DEF CON CTF Finals this year, with Super Guesser and CodeRed.hackerteam! Thanks to Nautilus Institute for organizing 🥳

"Unleashing a 0day: Pivoting Capabilities and Conquering the Linux Kernel" 🕺 💪 by Pedro Guerra de Oliveira Pinto

Earlier this year, I used a 1day to exploit the kernelCTF VRP LTS instance. I then used the same bug to write a universal exploit that worked against up-to-date mainstream distros for approximately 2 months. osec.io/blog/2024-11-2…

We are back😎 Say hello to our kernelCTF submission for CVE-2025-37752🩸 Who would have thought you could pwn a kernel with just a 0x0000 written 262636 bytes out of bounds? Read the full writeup at: syst3mfailure.io/two-bytes-of-m… 👀

A great overview of the Linux Page Allocator 💯 syst3mfailure.io/linux-page-all…

New Linux 0-day incoming 😇

We are the fastest on our keyboard... 0day unleashed and race condition triggered in kernelctf spreadsheet🩸

🚨🚨🚨We just broke everyone’s favorite CTF PoW🚨🚨🚨 Our teammate managed to achieve a 20x SPEEDUP on kctf pow through AVX512 on Zen 5. Full details here: anemato.de/blog/kctf-vdf The Sloth VDF is dead😵 This is why kernelCTF no longer has PoW!

Oops, we just pwned the kernelCTF mitigation instance with a 0day😳 Our fellow pwner syst3mfailure has picked up pigeon feeding as a hobby to help him cope with the insanity