A daily CTF challenge with a fun new puzzle every day
We publish one simple, beginner-friendly or educational CTF challenge every day!
Solve within 24 hours of release to appear on the leaderboard.
Discussion with friends or AI is welcome (account sharing is prohibited).
Sharing solutions is allowed only after 24 hours have passed since release.
Try the first challenge
Is this your first CTF? Let's begin by tackling the first challenge released on Daily AlpacaHack.
tchen
minaminao
hiikunztchenhiikunztchenminaminaohiikunzminaminao
shiragihiikunz
tan90909090Want a harder challenge?
Go to B-SIDETopic: HTTPReleased: Jul 13, 2026
The user ID is alpaca and the password is pacapaca.
index.php reveals that it outputs the flag after sending a response header that redirects the user to login.php. Does this part of the code not get executed?login.php, but there are several ways to view the contents of index.php.