Challenge list
General SkillsLevel 4★★★★☆AWS CLI - S3 Bucket Investigation
An offline export of the S3 configuration is under `/challenge/s3_audit/` (`buckets.json` plus each bucket's…
Digital ForensicsLevel 4★★★★☆Extract Secret Key from Android App
Extract a safe ZIP-formatted APK fixture (evidence/app.apk) and analyze the encrypted API secret recorded in its…
General SkillsLevel 4★★★★☆Ansible Automation - Server Configuration Management
Analyze the generated run export artifacts/ansible/vault-export.yml without running Ansible or touching a server. It…
General SkillsLevel 4★★★★☆CI/CD Security - GitHub Actions Vulnerability
Audit the 20 GitHub Actions workflows under `/challenge/repo/.github/workflows/`. Many steps carry a `# audit-ticket:…
Digital ForensicsLevel 4★★★★☆Detect Unauthorized Access in CloudTrail Logs
Analyze the CloudTrail export `/challenge/cloudtrail.json` and trace the unauthorized use of a stolen access key and…
Digital ForensicsLevel 4★★★★☆Extract Secrets from Docker Image Layers
`/challenge/image/` is an unpacked `docker save` export (OCI layout). The layers are stored in `blobs/sha256/` as…
General SkillsLevel 4★★★★☆Infrastructure as Code - Terraform Security
Analyze the generated terraform/terraform.tfstate without initializing a Terraform provider. The output…
General SkillsLevel 4★★★★☆Kubernetes Basics - Cluster Investigation
Investigate the two snapshots in artifacts/kubernetes/ (pod-snapshot.yaml and secret-snapshot.yaml) without connecting…
Digital ForensicsLevel 4★★★★☆Decrypt TLS-Encrypted HTTPS Traffic
In `~/evidence/` there is a capture `traffic.pcap` (libpcap format) of HTTPS traffic from a client PC, and the TLS key…
General SkillsLevel 4★★★★☆Custom Tool Development - Web Directory Scanner
Analyze the locally generated artifacts/scanner/directory-report.ndjson instead of scanning a live website. The…
General SkillsLevel 4★★★★☆Network Tunneling - SSH Port Forwarding
Practice SSH local port forwarding inside one container. SSH listens on 127.0.0.1:22 and the internal service uses…
Digital ForensicsLevel 4★★★★☆Extract Malware Payload from Memory
`/challenge/memstrings.txt` holds the strings extracted from the address space of a suspicious process, and the…
Digital ForensicsLevel 4★★★★☆Detect Hidden Kernel Module in Memory
From the memory of a Linux host suspected of an LKM rootkit infection, three sets of module information were…
Digital ForensicsLevel 4★★★★☆Decode Multi-Stage Steganography
Three stages of steganography are planted in `/challenge/cover.png` and `/challenge/notes.txt`. Each stage holds the…
Digital ForensicsLevel 4★★★★☆Recover Fragmented JPEG File
`/challenge/fragments/` holds 256-byte clusters (`clus_NNNN.bin`) recovered from the unallocated space of a memory…
General SkillsLevel 4★★★★☆Encrypted Communication - GPG Public Key Cryptography
Practice GnuPG decryption. Import every private key under `/challenge/keys/` and decrypt each ciphertext under…
CryptographyLevel 4★★★★☆Cryptanalysis - DSA Nonce Reuse Key Recovery
/challenge/signatures.json, created with fresh keys at every start, holds the DSA public parameters (p of 1024 bits, q…
CryptographyLevel 4★★★★☆Cryptanalysis - Wiener's Attack on RSA
An embedded-device team made the RSA private exponent d very small to speed up decryption. The public exponent e in…
CryptographyLevel 4★★★★☆Cryptanalysis - Recovering an LCG's Hidden Parameters
A service generated both session tokens and an encryption keystream from a linear congruential generator x_{k+1} =…
Digital ForensicsLevel 4★★★★☆Recover Damaged RAID5 Array
The RAID5 array `/dev/md0` (4 members) on the file server fs01 no longer assembles after the member sdd failed.…
General SkillsLevel 4★★★★☆Vulnerability Scanning - Advanced Nmap NSE
The results of running `nmap -sV -sC --script vuln` against the internal subnet `10.66.13.0/24` are in…
Digital ForensicsLevel 4★★★★☆Reconstruct Attack Scenario from Multiple Logs
`/challenge/web.log`, `/challenge/auth.log` and `/challenge/db.log` record the same intrusion among a lot of…
General SkillsLevel 4★★★★☆Static Analysis - Code Vulnerability Scanning
The Python source of an internal notes app is in `/challenge/src/`. The nine lines flagged by an earlier…