scriptCTF 2026 Writeup

---

Crypto#

Misdirection#

It is not what it is. 1000100010100000100001110100100001010010001010110001101100101010000111000001001001000100101000100100001000101110001

At first I thought this was a binary string... but after some research, it is actually a Bacon's Cipher. which is a 5-bit binary code, where 0 = A and 1 = B. I used this https://cryptii.com/pipes/bacon-cipher/ website to help me decode the string.

10001 00010 10000 01000 01110 10010 00010 10010 00101 01100 01101 10010 10100 00111 00000 10010 01000 10010 10001 00100 00100 01011 10001

and I got the result: scriptctfnotwhatitseems

scriptctf{notwhatitseems}

Web#

404 Found#

Please don't hack my shopping cart! (instance)

I go to /robots.txt and found

User-agent: *
 Disallow: /the-best-robot

so I go to /the-best-robot and found the flag

scriptCTF{r0b07s_4r3_t4k1ng_0v3r_aa36031bde16}

Reversing#

mc-checker#

I started up the minecraft world and found bunch of levers, just flicking it around

and found the code 0110111000110000010000010100100101110000010011000111101000100001 which then translates to n0AIpLz!

scriptCTF{n0AIpLz!}

MeowvelousShop#

"to distrcat your enemy, you must first distrcat yourself" --⚞^. .^⚟

This one is hard,,, I gave up. Still learning how to use ghidra.

Conclusion#

This one is a short writeup, but I learned a lot from this CTF. I hope to do better next time.