Challenge list
General SkillsLevel 5★★★★★APT Simulation - Full Breach Scenario
This is not an attack exercise but a blue-team task of reading the logs of an incident that already happened. From the…
Digital ForensicsLevel 5★★★★★Reconstruct Full APT Attack Stages
Four logs, `/challenge/edr_process.log`, `proxy_http.log`, `dns_queries.log` and `dlp_transfer.log`, hold an APT…
Digital ForensicsLevel 5★★★★★Crack BitLocker Encrypted Drive
Learn BitLocker recovery-key verification with a safe metadata fixture. bitlocker.img is not a real volume. Identify…
Digital ForensicsLevel 5★★★★★Extract Message Hidden in Bitcoin Transaction
The victim paid the ransom to the Bitcoin address `bc1qr4nsmw4r3pay7hzfx0d9cq3vkt8e6m5ljgs2ua`.…
General SkillsLevel 5★★★★★Bug Bounty Practice - Vulnerability Discovery Master
Analyze the fixed artifacts/bug-bounty/triage-report.json instead of testing a live application. A chained report has…
Digital ForensicsLevel 5★★★★★Extract Secret Key from IoT Device Firmware
Analyze the update file `/home/ctfuser/evidence/firmware.bin` of the network camera KNC-CAM-2000 (do not connect to a…
ProgrammingLevel 5★★★★★Advanced Python - Concurrent Event DAG Correlation
events.jsonl interleaves randomly ordered events from many services and traces. Starting from the marked auth.failed…
General SkillsLevel 5★★★★★Red Teaming - Custom C2 Framework
No C2 server, agent, socket communication, or command execution is started. Analyze the local…
General SkillsLevel 5★★★★★Anti-Forensics - Evidence Elimination
After the intrusion the attacker covered their tracks: they cut a time window out of `/challenge/auth_syslog.log` (the…
General SkillsLevel 5★★★★★Custom Malware - Stealth Techniques
No executable malware, injection, or evasion capability is included. Analyze the inert configuration sample…
General SkillsLevel 5★★★★★Cloud Pentesting - AWS Multi-Stage Attack
Do not use AWS credentials, a metadata endpoint, or Lambda. Analyze the local artifacts/aws/cloudtrail-chain.jsonl…
General SkillsLevel 5★★★★★Container Escape - Kubernetes Privilege Escalation
Do not use a Kubernetes API, host mount, privileged container, or escape. Read the static…
General SkillsLevel 5★★★★★Supply Chain Attack - Dependency Exploitation
Audit the dependency records of the Node.js app `kinoco-webapp`: `/challenge/dependencies.txt` (the dependencies…
Digital ForensicsLevel 5★★★★★Extract VM Information from Hypervisor Memory
Analyze the KVM host memory dump `/home/ctfuser/evidence/kvm_host.dump`. The guests are configured like AMD SEV, so…
General SkillsLevel 5★★★★★Pivoting - Multi-Tier Network Penetration
Analyze the prerecorded artifacts/pivot/topology.json without creating routes, tunnels, proxies, or remote services.…
General SkillsLevel 5★★★★★Fuzzing Basics - 0-day Discovery
Analyze the prerecorded crash set without running a fuzzer or target binary. artifacts/fuzzing/triage.csv lists each…
ProgrammingLevel 5★★★★★Programming - APT Timeline Analysis
/challenge/events.jsonl combines security logs collected from several hosts and is regenerated with random data every…
ProgrammingLevel 5★★★★★Programming - AST-Based Vulnerability Detection
/challenge/corpus/*.py are Python sources for code review, regenerated with random data every time the container…
ProgrammingLevel 5★★★★★Programming - AWS Permission Analysis
/challenge/iam.json holds users, groups and policies and /challenge/s3_objects.json lists S3 objects (bucket, key,…
ProgrammingLevel 5★★★★★Programming - IoT Firmware Analysis
Analyze the network-camera firmware image firmware.bin, which is generated randomly at every start (it contains no…
ProgrammingLevel 5★★★★★Programming - Coverage-Guided Fuzzing
Analyze the coverage-guided fuzzer run record coverage-queue.jsonl, which is generated randomly at every start (the…
ProgrammingLevel 5★★★★★Programming - Zero-Click Message Analysis
messages.ndjson is the traffic log of a messaging app, built from random data at every start (in /challenge). Each…
ProgrammingLevel 5★★★★★Programming - Timing Attack Data Analysis
timings.csv is raw timing-attack measurements built from random data at every start (in /challenge). Against a server…
Digital ForensicsLevel 5★★★★★Detect Process Hollowing Attack
From the memory of a Windows host, the process list `process_list.txt` (the PEB view), the VAD list `vad_regions.txt`…