ZeroDay Alliance
Capture the flag and make our society secure
A jeopardy-style security competition spanning web exploitation, binary exploitation, reverse engineering, cryptography, forensics and OSINT. Find the flag, submit it, score points.
- Challenges
- Players
- Flags captured
- Points available
Challenges
Discover six disciplines
Challenges are grouped by category and rated from Easy to Insane.
Flag format ZDA{...}
Web Exploitation
Injection, auth bypasses and broken session logic.
Binary Exploitation (Pwn)
Memory corruption, ROP chains and heap tricks.
Reverse Engineering
Pull apart binaries and scripts to recover secrets.
Cryptography
Weak ciphers, bad randomness and protocol flaws.
Forensics
Packet captures, disk images and hidden data.
OSINT / Misc
Open-source intelligence and lateral thinking.
Discover how it works
- 1
Create an account
Register as a player and pick a team name for the scoreboard.
- 2
Capture flags
Exploit, reverse and analyse each challenge to recover its ZDA{...} flag.
- 3
Climb the board
Every correct flag scores points. First solves earn first-blood credit.