Welcome to the fl4gtory!


Snatch those flags right from our production lines to gain points in the 2023 edition of the KITCTFCTF.

  • Flag production will run for 36 hours, from 09 June 2023, 10:00 UTC to 10 June 2023, 21:59:59 UTC.
  • Everyone can participate! You may play alone but it's more fun together plus you can share your knowledge to learn from each other.
  • The contest is a jeopardy-style CTF with challenges from all major categories and beginner-friendly to hard difficulty.


Thank you to our sponsors for supporting the CTF!

  • Zellic

    Main and writeup sponsor

    Zellic hires and applies top CTF talent to the world's most critical security problems, specializing in securing blockchain companies and smart contract protocols.

  • GitHub Security Lab

    Prize sponsor

    GitHub Security Lab's mission is to inspire and enable the community to secure the open source software we all depend on.

  • TelemaxX

    Infrastructure sponsor

    TelemaxX Telekommunikation GmbH is a Karlsruhe-based provider of state-of-the-art data center, housing, managed and telecommunications services for business customers.


  • 1st place: $500
  • 2nd place: $300
  • 3rd place: $200

Writeup prizes

  • Best overall writeup: $200 (1 time)
  • Best unintentional solution: $50 (1 time)
  • Best writeup of the pwn, rev, misc, crypto, web category: $150 (5 times)
  • Other writeups we liked: $100 (5 times)

We cannot give prizes to individuals on the U.S. sanctions list, or any individual residing in any U.S.-sanctioned country.


  • We will primarily use Discord for communication (join the Server now). Alternative communication channels TBA.
  • Each player may only participate in one team. The number of players participating in a single team is not limited. You may share one account to access the contest platform.
  • If you have a question or a problem, please reach out to us (e.g. if a seemingly valid flag gets rejected).
  • The flag format is GPNCTF{.*} (only printable ASCII characters), unless specified otherwise in the challenge description. For example, GPNCTF{w3lc0m3_70_6pnc7f_2023_2f41b7e84a02939e} could be a valid flag.
  • We use dynamic scoring. That means, challenges which are solved more often will be worth less points. Every team that solves a challenge is awarded the same amount of points, the scores will be updated dynamically.

The following behavior is strictly prohibited:

  • Any behavior that affects the fairness of the contest.
  • Posting or sharing task solutions or flags.
  • Attacking the contest infrastructure or systems of organizers or other participants. Only the servers mentioned in challenge descriptions or resources are in scope. The event is hosted during the GPN21, but attacking GPN infrastructure is strictly prohibited.
  • Exploiting vulnerabilities in the contest infrastructure or purposefully breaking challenges for others. If you find such a vulnerability, please report it to us.


Play online or in person at the GPN21. The “Goulash Programming Night” is one of the biggest free events of the European hacking scene. It is hosted by the local Chaos Computer Club Community, the Entropia e.V., and is open to everyone, not only “digital natives” and nerds. Program-wise, the GPN will feature a variety of talks with both technical and social topics. As the name implies, it also offers a space for programming and tinkering as well as presenting and discussing projects and topics. And of course, the famous goulash and other freshly prepared dishes will keep you satiated and strong while hacking!

We will host the CTF live at the GPN. Feel free to visit us there for information about CTFs and getting to know the team behind the competition. Also, we will hold an introductory talk on Friday, 17:00 UTC to help beginners starting out. The talk will likely be recorded and streamed (further information will follow shortly before the talk).