The next evolution of Buna Byte CTF is here.
π₯ Introducing Labs.
No shared environments.
No waiting.
Just your own dedicated lab instance running in an isolated container.
Start with OWASP Juice Shop and practice against one of the most vulnerable web applications ever built.
More vulnerable machines and realistic labs are on the way.
Ready to hack?
https://ctf.bunabyte.com
@bunabytecs
π₯ Introducing Labs.
No shared environments.
No waiting.
Just your own dedicated lab instance running in an isolated container.
Start with OWASP Juice Shop and practice against one of the most vulnerable web applications ever built.
More vulnerable machines and realistic labs are on the way.
Ready to hack?
https://ctf.bunabyte.com
@bunabytecs
2β€9β‘5π₯5π1
Buna Byte
The Official East Africa Cybersecurity and AI Summit 2026 CTF challenges are Now Available on Buna Byte CTF How to Join 1. Visit https://ctf.bunabyte.com/events/eacasummit-2026-ctf 2. Log in to your account (or create one if you don't have an account yet).β¦
Event challenges starts 1:00 night Local Time, 7:00 PM
π7π₯3π1
Sorry for the technical glitch we are on it. Thanks for understanding.
β€9π₯1
Now file based challenges work. we are working on the lab challenges, will update you as soon as they also work.
π13β€1π1
If you see this kind of page on the lab based challenges, give it time to initiate (5 to 10 sec) and then
@bunabytecs
ctr + r@bunabytecs
β8β€2π1
Eight days into the EACASummit CTF Archive, not a single team has completed all 19 challenges. The closest competitor is only 2 flags away.
Now the challenge is yours.
The archived CTF remains available for 22/30 days after the launch.
Break the final challenge.
Claim all 19 flags.
Earn the bragging rights that no one else has.
@bunabytecs
Now the challenge is yours.
The archived CTF remains available for 22/30 days after the launch.
Break the final challenge.
Claim all 19 flags.
Earn the bragging rights that no one else has.
@bunabytecs
π₯12β€1π1π₯°1
Recognition Roulette
Bypassing blacklist filters to exploit SSTI and extract environment variables in the Recognition Roulette web challenge.
Buna Byte | bunabyteβ.com β’ Jul 28, 2026
Bypassing blacklist filters to exploit SSTI and extract environment variables in the Recognition Roulette web challenge.
Buna Byte | bunabyteβ.com β’ Jul 28, 2026
π₯5β3β€βπ₯2π1
Weβre giving Buna Byte CTF a new identity. πͺπΉ
Today, weβre introducing the new Buna Byte CTF Ranking System.
Instead of the usual Bronze, Silver, Gold, and Diamond ranks, players will rise through a progression inspired by Ethiopian historical military titles.
From:
ααα³αͺ β Gwandari
to
α α₯α α αα β Asir Aleqa
ααα³ α αα β Hamsa Aleqa
α»αα β Shalaqa
αα³αα«αͺ β Fitawrari
α°αααα½ β Dejazmatch
and ultimatelyβ¦
α«α΅ β Ras
Each rank represents another step in your journey as you solve challenges, earn points, and prove your skills.
Solve. Earn. Rise.
@bunabytecs
Today, weβre introducing the new Buna Byte CTF Ranking System.
Instead of the usual Bronze, Silver, Gold, and Diamond ranks, players will rise through a progression inspired by Ethiopian historical military titles.
From:
ααα³αͺ β Gwandari
to
α α₯α α αα β Asir Aleqa
ααα³ α αα β Hamsa Aleqa
α»αα β Shalaqa
αα³αα«αͺ β Fitawrari
α°αααα½ β Dejazmatch
and ultimatelyβ¦
α«α΅ β Ras
Each rank represents another step in your journey as you solve challenges, earn points, and prove your skills.
Solve. Earn. Rise.
@bunabytecs
1π₯15π3π3β€2π€£1
π₯ This Weekend, Buna Byte CTF is dropping a new hands-on exploitation lab, designed and provided in collaboration with Abyssinia Labs.
Difficulty:βοΈβοΈβοΈ Medium
Category: Web
Based on: #CVE-2026-64638 ("XSS2Shell")
Lab link: https://ctf.bunabyte.com/lab/xss2shell
Think you can get the shell?
See you there.
@bunabytecs @AbyssiniaLabs
Difficulty:βοΈβοΈβοΈ Medium
Category: Web
Based on: #CVE-2026-64638 ("XSS2Shell")
Lab link: https://ctf.bunabyte.com/lab/xss2shell
Think you can get the shell?
See you there.
@bunabytecs @AbyssiniaLabs
π₯11β€5π₯°1
Buna Byte
π₯ This Weekend, Buna Byte CTF is dropping a new hands-on exploitation lab, designed and provided in collaboration with Abyssinia Labs. Difficulty:βοΈβοΈβοΈ Medium Category: Web Based on: #CVE-2026-64638 ("XSS2Shell") Lab link: https://ctf.bunabyte.com/lab/xss2shellβ¦
DROPPED TODAY.
10:00 LT
XSS2Shell.
Go and get that shell. π₯
10:00 LT
XSS2Shell.
Go and get that shell. π₯
β‘10π₯2π₯°1