Heart Part 7 - dalCTF 2026

dalCTF 2026 featured diverse challenges. Heart involved SQL injection for admin JWT access and heap memory disclosure to leak an AES-256 key for flag decryption. Iceman required GraphQL introspection to escalate from fan tier to OVO membership to access the vaultManifest field. Weird Movements focused on forensics, where a Linux USB HID mouse trace revealed a flag drawn on screen, which was further obfuscated using ROT13 encoding within a pcap capture file.