Challenge list

Find Attack in Apache Logs

Analyze the Apache access.log (common format) to find traces of SQL injection. Tell which attacks succeeded and which…

Flag Hidden in Excel Macro

Analyze the macro code embedded in the Excel workbook and find the hidden authentication code (the flag). Learn how to…

Hidden PDF Streams

The PDF file contains compressed object streams. An internal note that is not shown on the page is hidden inside them.…

CryptographyLevel 2★★☆☆☆

RC4 Stream Cipher Weakness

RC4 was once widely used but is now deprecated. This introductory task focuses on recognizing the provided data…

75 ptsOpen challenge

CryptographyLevel 2★★☆☆☆

Vigenere Cipher Decryption

Decrypt a Vigenere cipher when the key length is known and retrieve the flag. Ciphertext:…

Web-11. SQL Injection into the Employee Portal

KinoGadget's internal "Employee Access Portal" runs on a legacy authentication system. The lead developer is rumored…

Web-12. Reflected XSS in BlogSearch

BlogSearch is a simple search engine for blog articles. The search query is embedded into the results page as-is…

40 ptsOpen challenge

Web-13. Bypassing File Upload Checks in ImageVault

ImageVault is an image hosting service that accepts JPG, PNG, and GIF uploads. If its validation only checks the end…

Web-14. Command Injection in a Network Diagnostic Tool

This app is a diagnostic tool that runs ping against a host you supply. If the host input is passed straight into a…

Web-15. IDOR in the UserProfile Service

The UserProfile Service exposes an API that returns profile information for a given user ID. Check whether the service…

Web-16. Weak JWT Secret in the CHIMERA Research Lab

Clues found after breaching the employee portal point to an isolated research lab system codenamed CHIMERA. It…

60 ptsOpen challenge

Web-17. Path Traversal in FileShare

FileShare lets users list and download files from a shared folder. Check whether the filename parameter passed to the…

Web-18. XXE Attack via a Contact Form

This contact form serializes its input as XML and sends it to the server, which parses it and echoes the result.…

Web-19. CSRF Transfer in a Banking App

This banking app lets a logged-in user transfer money. Check whether CSRF protections exist by seeing if a separate…

Web-20. SSRF via the URL Fetcher

This URL Fetcher service retrieves and displays the content of any URL a user provides. Check whether it can be…

Find USB History in Windows Registry

Analyze the SYSTEM file (a text model of the USBSTOR part of the registry hive) to identify the USB device that was…

Find Secret File in Disk Image

Inspect the ext4 filesystem disk image `disk.img`, find the secret backup hidden in the filesystem, and recover the…

Network Analysis - DNS Zone Transfer Leak

An unauthenticated DNS zone transfer (AXFR) against a misconfigured authoritative server was captured. Download the…

Network Analysis - ICMP Data Exfiltration

Data was exfiltrated from the internal host 10.20.0.15 to the external host 203.0.113.66 disguised as ping (ICMP echo…

Network Analysis - SMB Share Enumeration Leak

An attacker enumerating SMB shares on the network was captured. Download the packet capture (traffic.pcap), follow the…

Network Analysis - Telnet Credentials

A legacy server was administered over Telnet in clear text. Download the packet capture (traffic.pcap), follow the…

Network Analysis - Anonymous FTP Transfer

An anonymous FTP session was captured in clear text. Download the packet capture (traffic.pcap), follow the FTP data…

Network Analysis - Clear-text HTTP Credentials

Analyze traffic intercepted on public Wi-Fi where someone logged in over plain HTTP. Download the packet capture…