Researcher solves Cloudflare's PHP CTF challenge, captures the flag

evilsocket · x · 2026-10-28

Cloudflare launched a PHP Capture the Flag challenge integrated with its bug bounty program to stress-test its WAF. Shortly after launch, researcher kfirsov captured the flag, posting a screenshot of the verified 'You found the flag!' page, demonstrating a bypass of Cloudflare's sandbox defenses.

Original post →

More from Safety

Safety channel →