Overview
At Midnight Sun CTF 2026 Finals held in Stockholm, Sweden, team BunkyoWesterns, which includes our members, took 1st place worldwide.
About the Competition
Midnight Sun CTF is an international CTF based in Sweden. Only top teams from around the world that advance through the online qualifiers are invited to the on-site Finals in Stockholm. The Finals combine a Jeopardy format, in which teams score by solving individual challenges, with a King of the Hill (KotH) format, in which teams continuously attack and defend a target system. The structure tests not only offensive techniques but also operational capability.
Competition Details
The team solved every Jeopardy challenge offered in the event. In one of the KotH challenges, "tiny-tags", the team also focused on flaws on the competition infrastructure side and built a solution that triggered XSS with a payload of only one byte. Rather than the short-payload solution the organizers likely intended, the breakthrough came from discovering and leveraging a vulnerability in the operational infrastructure itself.
The Team and Our Involvement
Many of our members and members from partner companies participate in BunkyoWesterns. We support the team's on-site participation by covering part of their travel costs and through similar arrangements. The offensive perspective and real-environment operational know-how cultivated through CTF activities translate directly into practical assets for vulnerability research and assessment in our work.
We provide AI-driven security assessment and consulting services grounded in this hands-on vulnerability discovery expertise. If you are interested, please feel free to contact us.