SRCTF 2026 was co-hosted on the 15th and 16th of August by SWITCH, CSIT, and RISC as Tech Related Clubs @ RMIT. This was the first time we (Sadiq & Ibrahim) went to an in-person CTF, and the vibe and general feeling was just so much more pleasant than any online CTF I’ve partaken in, with socialisation and networking being a huge part of the event that I enjoyed.

We joined as the team womeninstem and managed to grasp first place after a stressful final half hour of being tied with team .index. Those guys may not be allies.

womeninstem finishing 1st place with 4225 points Top 15

Shout-out to Prisha for telling me about this event!

Days

  • Day 1 - Check-in + Basic Challenges, IDORs and a LaTeX filter bypass on the AussieMed practice management system.
  • Day 2 - IDOR, a base64 record ref, and an XXE that leaks the Flask session signing key from .env.

2 items under this folder.