Capture The Flag

Wednesday, September 23, 2026 · Porto, Portugal · That's a wrap

The AppSec Days Portugal CTF ran on the evening of September 23. Challenges spanned a wide range of security domains, from web vulnerabilities and reverse engineering to cryptography and binary exploitation, at every level from first-timer to professional bug hunter.

All skill levels Live, jeopardy-style Evening of September 23

Organized by xSTF.pt

The 2026 winners

  1. The Hacktopi First place
  2. Segfault Society Second place
  3. Null Pointers Third place

Congratulations to all three, and thank you to everyone who played.

What the challenges were like

Jeopardy-style, and pitched at every level of experience

Beginner Friendly

Introductory challenges were built to be approachable for first-timers, with guidance and community support on site.

Real-World Challenges

Challenges were rooted in real-world security scenarios across a wide range of domains and disciplines.

Hard Mode Available

Seasoned bug hunters found advanced challenges that demanded deep technical knowledge and creative exploitation.

See you at the next one

Thanks to everyone who played, and to xSTF.pt for building and running the challenges.

See how the event went