github repo: https://github.com/dicegang/dicectf-quals-2026-challenges

Pwn:

bytecrusher: [303 solves]

by maxster

Description
Dice's new proprietary text crusher is here! Try it out for free with our sixteen free trials of the premium service!

Connection
nc bytecrusher.chals.dicec.tf 1337

Files
[pwn_bytecrusher.tar.gz](<https://dice26-quals.storage.googleapis.com/uploads/d215ad3ae0b345685294bcc62fa60fefdbae77b3c81e07a16ce149bed035e85c/pwn_bytecrusher.tar.gz>)

pwn_bytecrusher.tar.gz

message-store: [194 solves]

by clubby

Description
i have written a 100% safe store for all your safety-critical messages. come say hello.

Connection
nc message-store.chals.dicec.tf 1337

Files
[pwn_message-store.tar.gz](<https://dice26-quals.storage.googleapis.com/uploads/f3f7f6f15a7e52e1d4a28d823c609c4808bddd8d8c200cf5ca172790ede02a88/pwn_message-store.tar.gz>)

pwn_message-store.tar.gz

garden: [85 solves]

by maxster

Description
in a walled garden, you can't escape!

Connection
nc garden.chals.dicec.tf 1337

Files
[pwn_garden.tar.gz](<https://dice26-quals.storage.googleapis.com/uploads/58d5d4a262199adcd1e72e103933cc1024819a25753a687970d5ef042b85b6f9/pwn_garden.tar.gz>)

pwn_garden.tar.gz

cornelslop: [6 solves]

by fizzbuzz101

Description
CoR's love for kernel slop comes to... DiceCTF!

The CoR tribunal will determine your fate based on whether you can pwn their process integrity verifier.

Remember, in the AI era, when execution is cheap and correctness is abundant, kernel pwnage is the moat.

Download vmlinux with debug symbols [here](<https://storage.googleapis.com/dicectfiles/cornelslop-vmlinux>).

Connection
ssh -p 1337 [email protected] connect $(cat exploit | ssh -p 1337 cornelslop.chals.dicec.tf uploa

Files
[pwn_cornelslop.tar.gz](<https://dice26-quals.storage.googleapis.com/uploads/3e4031266deef0da35663ac620ba5fe3b5a4b529b6f56f1c448ce50be9ddfa1e/pwn_cornelslop.tar.gz>)

pwn_cornelslop.tar.gz

Web:

diceminer: [314 solves]