Challenge list
ProgrammingLevel 3★★★☆☆Programming - Image Steganography
image.pgm is a text-format (P2) PGM image created at every start (in /challenge). Collect the least significant bit…
General SkillsLevel 3★★★☆☆Regex Expert - Data Validation
/challenge/data.txt holds 400 contact records. Each line contains an email address, a phone number, an IP address and…
General SkillsLevel 3★★★☆☆Advanced Automation - Directory Monitor
`/challenge/logs/` holds access logs from four web front ends (combined log format, 60 files, over 100k lines). The…
General SkillsLevel 4★★★★☆AWS CLI - S3 Bucket Investigation
An offline export of the S3 configuration is under `/challenge/s3_audit/` (`buckets.json` plus each bucket's…
General SkillsLevel 4★★★★☆Ansible Automation - Server Configuration Management
Analyze the generated run export artifacts/ansible/vault-export.yml without running Ansible or touching a server. It…
General SkillsLevel 4★★★★☆CI/CD Security - GitHub Actions Vulnerability
Audit the 20 GitHub Actions workflows under `/challenge/repo/.github/workflows/`. Many steps carry a `# audit-ticket:…
General SkillsLevel 4★★★★☆Infrastructure as Code - Terraform Security
Analyze the generated terraform/terraform.tfstate without initializing a Terraform provider. The output…
General SkillsLevel 4★★★★☆Kubernetes Basics - Cluster Investigation
Investigate the two snapshots in artifacts/kubernetes/ (pod-snapshot.yaml and secret-snapshot.yaml) without connecting…
LinuxLevel 4★★★★☆Linux-Kernel Module. Gaining Root via a Vulnerable Driver
This challenge analyzes a vulnerable character-device driver as a safe user-space simulation. No real kernel module is…
LinuxLevel 4★★★★☆Linux-Buffer Overflow. Exploiting a gets() Vulnerability
A vulnerable SUID C binary with protections disabled is provided. Exploit its buffer overflow to redirect control flow…
ProgrammingLevel 4★★★★☆Advanced Python - Custom VM Bytecode Execution
program.kvm is bytecode for a custom four-register VM. Implement an interpreter in Python from the instruction…
General SkillsLevel 4★★★★☆Custom Tool Development - Web Directory Scanner
Analyze the locally generated artifacts/scanner/directory-report.ndjson instead of scanning a live website. The…
General SkillsLevel 4★★★★☆Network Tunneling - SSH Port Forwarding
Practice SSH local port forwarding inside one container. SSH listens on 127.0.0.1:22 and the internal service uses…
Network SecurityLevel 4★★★★☆Network Analysis - Rebuilding Chunked gzip HTTP from TCP
capture.pcap records two HTTP exchanges over one TCP connection. The server's segments are reordered and some are…
Network SecurityLevel 4★★★★☆Network Analysis - TCP Retransmission Covert Channel
capture.pcap contains TCP retransmissions with duplicate sequence numbers. Extract retransmissions whose payload…
ProgrammingLevel 4★★★★☆Binary Repair - Firmware Header and CRC32
Repair firmware.bin by writing KINO at bytes 0-3 and the little-endian CRC32 of bytes 12+ at bytes 8-11. Submit the…
ProgrammingLevel 4★★★★☆Programming - C2 Traffic Analysis
Analyze the synthetic log beacon.log, which is generated randomly at every start (no network connection is needed).…
ProgrammingLevel 4★★★★☆Programming - Buffer Overflow Crash Analysis
Analyze the crash reports crash_01.txt to crash_06.txt, which are generated randomly at every start (they contain no…
ProgrammingLevel 4★★★★☆Programming - Fuzzing Result Analysis
Analyze the fuzzing result log fuzz-results.log, which is generated randomly at every start (inputs are merely stored;…
ProgrammingLevel 4★★★★☆Programming - Blockchain Event Reassembly
/challenge/blocks.json is a list of blocks from an offline development chain, regenerated with random data every time…
ProgrammingLevel 4★★★★☆Programming - Rootkit View Diffing
proc_ps.txt (the userland ps output) and proc_kernel.txt (the result of walking the kernel task list directly) are…
ProgrammingLevel 4★★★★☆Programming - Anomaly Detection
/challenge/requests.csv is a web API access log that is regenerated with random data every time the container starts…
ProgrammingLevel 4★★★★☆Programming - Pentest Finding Analysis
findings.json is a scan result built from random data at every start (in /challenge). It has entry (edge-gw),…
ProgrammingLevel 4★★★★☆Programming - Async Scan Result Analysis
/challenge/scan-events.jsonl is the event log of an asynchronous port scanner, regenerated with random data every time…