b404team@ctf:~$
 

B404CTF 2026

Official online Jeopardy-style cyber security competition, organized by B404TEAM. 24 hours of hand-crafted challenges and a live dynamic scoreboard — open to teams of up to 3, from students to security professionals.

FORMAT: Jeopardy · team-based START: 2026-09-19 · 09:00 UTC DURATION: 24 hours
time until start
00
days
00
hours
00
min
00
sec
about the event

A 24-hour sprint, built by hackers, for hackers.

B404CTF 2026 is an official online cyber security competition in Jeopardy format, organized by B404TEAM. The event brings together students, cyber security enthusiasts, and security professionals to test their skills in a competitive, team-based environment with a live dynamic scoreboard. Teams can have up to 3 members.

Challenges are hand-crafted across a wide range of skill levels — from beginner-friendly warmups to advanced, real-world scenarios.

FormatOnline · Jeopardy
Team sizeUp to 3 members
Start2026-09-19 09:00 UTC
End2026-09-20 09:00 UTC
Duration24 hours
ScoringDynamic (decay)
schedule & format

Competition timeline

Twenty-four hours, one scoreboard, zero breaks.

09:00 UTC — September 19, 2026
Competition starts
The scoreboard opens and challenges become visible to every registered team.
09:00 (Sep 19) → 09:00 (Sep 20) UTC
24 hours of live challenges
Web, Pwn, Reverse Engineering, Cryptography, Forensics & OSINT, Misc — dynamic scoring throughout.
09:00 UTC — September 20, 2026
Finish & standings
The scoreboard closes. Final results are validated by the organizing team.
challenge categories

Six domains. Points that decay with every solve.

Every challenge starts at its maximum value. The more players solve it, the more its value automatically decreases — first solves earn the most.

CAT / WEB
Web Exploitation
SQLi, XSS, SSRF, auth bypasses, API security.
points500 → 100
CAT / PWN
Binary Exploitation
Buffer overflows, heap exploitation, ROP chaining.
points500 → 100
CAT / REV
Reverse Engineering
Malware analysis, binary decompilation, obfuscation.
points500 → 100
CAT / CRY
Cryptography
Classic ciphers, modern RSA/ECC attacks, custom protocols.
points500 → 100
CAT / FOR
Digital Forensics & OSINT
Memory dumps, network PCAPs, steganography.
points500 → 100
CAT / MISC
Miscellaneous
Logic puzzles, scripting, esoteric systems.
points500 → 100
scoring & rules

cat rules.txt

rules.txt
# flag format — used across all challenges
B404CTF{s0m3_c3v3r_fl4g_h3r3}
# fair play — violations result in immediate disqualification
  • 01 Sharing flags, solutions, or hints during the competition is strictly prohibited.
  • 02 Do not attack the infrastructure or the scoreboard.
  • 03 Brute-forcing flags or challenge infrastructure is forbidden, unless explicitly permitted in a challenge's prompt.
prizes & recognition

Prizes to be announced

// TBA
Prize details will be published ahead of the event — follow the official Discord for updates.
get ready

Register your team

Spots on the live scoreboard are open to teams of up to 3 members — from first steps to advanced.

▸ REGISTER NOW