[nicce]

Many CTF challenges use existing real vulnerabilities, so that alone may not be sufficient.

[saagarjha]

Yes, which is why you can look at the article to figure out if it is real or not.