Challenge list
ProgrammingLevel 5★★★★★Programming - APT Timeline Analysis
/challenge/events.jsonl combines security logs collected from several hosts and is regenerated with random data every…
ProgrammingLevel 5★★★★★Programming - AST-Based Vulnerability Detection
/challenge/corpus/*.py are Python sources for code review, regenerated with random data every time the container…
ProgrammingLevel 5★★★★★Programming - AWS Permission Analysis
/challenge/iam.json holds users, groups and policies and /challenge/s3_objects.json lists S3 objects (bucket, key,…
ProgrammingLevel 5★★★★★Programming - IoT Firmware Analysis
Analyze the network-camera firmware image firmware.bin, which is generated randomly at every start (it contains no…
ProgrammingLevel 5★★★★★Programming - Coverage-Guided Fuzzing
Analyze the coverage-guided fuzzer run record coverage-queue.jsonl, which is generated randomly at every start (the…
ProgrammingLevel 5★★★★★Programming - Zero-Click Message Analysis
messages.ndjson is the traffic log of a messaging app, built from random data at every start (in /challenge). Each…
ProgrammingLevel 5★★★★★Programming - Timing Attack Data Analysis
timings.csv is raw timing-attack measurements built from random data at every start (in /challenge). Against a server…
Digital ForensicsLevel 5★★★★★Detect Process Hollowing Attack
From the memory of a Windows host, the process list `process_list.txt` (the PEB view), the VAD list `vad_regions.txt`…
Digital ForensicsLevel 5★★★★★Detect Tampered Timestamps
`/challenge/mft_timeline.csv` is a timeline exported from the NTFS `$MFT`. It has the `$STANDARD_INFORMATION` (SI) and…
Digital ForensicsLevel 5★★★★★Decrypt Encrypted iOS Backup
Verify the password of an encrypted iOS backup with a safe iTunes metadata fixture. No real iPhone or backup is used.…
Digital ForensicsLevel 5★★★★★Create Memory Profile for Unknown Linux Kernel
Analyze `/home/ctfuser/evidence/custom_kernel.dump`, part of the physical memory of a server running an in-house…
Digital ForensicsLevel 5★★★★★Decode Custom Protocol C&C Communication
The egress proxy recorded the traffic of the compromised endpoint 10.20.4.88. In `/challenge/beacon.log`, each line is…