Challenge list
General SkillsLevel 5★★★★★Container Escape - Kubernetes Privilege Escalation
Do not use a Kubernetes API, host mount, privileged container, or escape. Read the static…
General SkillsLevel 5★★★★★Supply Chain Attack - Dependency Exploitation
Audit the dependency records of the Node.js app `kinoco-webapp`: `/challenge/dependencies.txt` (the dependencies…
Network SecurityLevel 5★★★★★Network Analysis - IPv4 Overlapping Fragment Reassembly
The UDP datagram with IPv4 ID 0xbeef in fragments.pcap contains overlapping fragments that overwrite earlier bytes.…
General SkillsLevel 5★★★★★Pivoting - Multi-Tier Network Penetration
Analyze the prerecorded artifacts/pivot/topology.json without creating routes, tunnels, proxies, or remote services.…
General SkillsLevel 5★★★★★Fuzzing Basics - 0-day Discovery
Analyze the prerecorded crash set without running a fuzzer or target binary. artifacts/fuzzing/triage.csv lists each…
ProgrammingLevel 5★★★★★Programming - APT Timeline Analysis
/challenge/events.jsonl combines security logs collected from several hosts and is regenerated with random data every…
ProgrammingLevel 5★★★★★Programming - AST-Based Vulnerability Detection
/challenge/corpus/*.py are Python sources for code review, regenerated with random data every time the container…
ProgrammingLevel 5★★★★★Programming - AWS Permission Analysis
/challenge/iam.json holds users, groups and policies and /challenge/s3_objects.json lists S3 objects (bucket, key,…
ProgrammingLevel 5★★★★★Programming - IoT Firmware Analysis
Analyze the network-camera firmware image firmware.bin, which is generated randomly at every start (it contains no…
ProgrammingLevel 5★★★★★Programming - Coverage-Guided Fuzzing
Analyze the coverage-guided fuzzer run record coverage-queue.jsonl, which is generated randomly at every start (the…
ProgrammingLevel 5★★★★★Programming - Zero-Click Message Analysis
messages.ndjson is the traffic log of a messaging app, built from random data at every start (in /challenge). Each…
ProgrammingLevel 5★★★★★Programming - Timing Attack Data Analysis
timings.csv is raw timing-attack measurements built from random data at every start (in /challenge). Against a server…
CryptographyLevel 5★★★★★Cryptanalysis - RSA e=3 Broadcast Attack
broadcast.json contains the same plaintext encrypted with unpadded RSA e=3 under three pairwise-coprime moduli.…