BSides312 2026 Last Minute CTF
Capture the Flag Event Rules
Please read ALL THE RULES CAREFULLY. It is each participant's responsibility to know and abide by all the rules. Any violation of any rule may result in instant disqualification and could place you at risk of criminal or civil prosecution.
These rules are designed to protect you. Please know them and abide by them!
- Attacking any Contest or Last Minute CTF Admins's infrastructure will result in immediate disqualification and a permanent ban.
- It's strictly forbidden to perform any kind of Denial of Service Attack (DoS/DDoS) against the servers or the competition's infrastructure.
- None of the challenges should require brute-forcing of any kind.
- Let's repeat: None of the challenges should require brute-forcing of any kind. DO NOT DO THIS!
- Attempting to exploit any other players will result in immediate disqualification and a permanent ban.
- Hints may be available for all challenges; feel free to reach out to the CTF admins located in
State (2nd floor)for assistance. - Expect to encounter fun and unexpected challenges throughout the competition.
- Bribery is explicitly allowed—get creative!
- Most importantly, have fun and learn a lot! :)
All flags will use the following format: 312{Flag_goes_here}
The flag can be any string value contained within the '{' and '}' symbols. When submitting a flag, ensure you include the entire flag format.
Please note that some challenges may not have a formal flag, but will be the answer to a question. In these cases, submit the answer in the flag format. For easier challenges, you may be reminded of this, but for more difficult ones, this information may be intentionally omitted.
NOTE: ALL challenges will have a specific flag and answer; there will not be multiple answers accepted.Example Flags
312{This_Is_Not_A_Flag}312{Unfortunately, no one can be told what the Flag is. You have to see it for yourself.}312{0a52730597fb4ffa01fc117d9e71e3a9}Challenge 1: Rules Flag
By submitting this flag, I have read and understand all of the rules and I will not break these rules.312{c6d18f3d857bda2f41e605d6ca81c80c}Fun Fact: The value used for this flag was created and can be confirmed as the MD5 hash of the above statement.
Disclaimer: Neither the Last Minute CTF Admins nor BSides312 is responsible for any information sent from users. Participants are solely responsible for their submissions and interactions during the event. We remind all participants to avoid sharing sensitive personal information. Any data shared is at your own risk, and we will not be liable for any unauthorized access or disclosure resulting from your interactions. Please exercise caution and protect your personal data throughout the event.
All challenges will have hints available should you need them. These hints are tailored to the challenges and are not generic suggestions. Some hints will be posted with their respective challenges to provide basic information about who/what/where/when/why/how the flag will be. However, most hints will require you to engage directly with the Last Minute CTF admins.
We want to ensure that you're genuinely attempting the challenge and demonstrating your work rather than simply looking for easy answers.
Not all hints are created equal; some may provide significant assistance, while others might be more subtle. Remember that hints are not meant to be direct answers but rather tools to guide you back on track. If one hint doesn't help much, show us your progress, and we’ll be happy to provide additional guidance, as multiple hints are available for each challenge.
We do not want anyone to become stuck on any challenge for too long. If you've been working on something for a while without making progress, please come talk to us; we're here to help!
This page, as well as any challenges, may be periodically updated to provide corrections and additional information as needed.