Zafiyet Önem 61/100
Introducing the Cloudflare PHP Capture the Flag challenge
Update — October 30, 2026: Thank you to everyone who has participated in the PHP Capture the Flag challenge. We have received a strong response from the security research community, and the submissions have helped us harden our existing php2shell WAF protections and create new detections. Details of managed-rule changes are available in the Cloudflare WAF changelog. The CTF remains open. We encourage researchers to continue submitting materially distinct, reproducible bypasses through the Cloudflare HackerOne program. We will share further information and feedback as the challenge progresses.