Challenge list
Find Secret File in Disk Image
Inspect the ext4 filesystem disk image `disk.img`, find the secret backup hidden in the filesystem, and recover the…
Network Analysis - DNS Zone Transfer Leak
An unauthenticated DNS zone transfer (AXFR) against a misconfigured authoritative server was captured. Download the…
Network Analysis - ICMP Data Exfiltration
Data was exfiltrated from the internal host 10.20.0.15 to the external host 203.0.113.66 disguised as ping (ICMP echo…
Network Analysis - SMB Share Enumeration Leak
An attacker enumerating SMB shares on the network was captured. Download the packet capture (traffic.pcap), follow the…
Network Analysis - Telnet Credentials
A legacy server was administered over Telnet in clear text. Download the packet capture (traffic.pcap), follow the…
Network Analysis - Anonymous FTP Transfer
An anonymous FTP session was captured in clear text. Download the packet capture (traffic.pcap), follow the FTP data…
Network Analysis - Clear-text HTTP Credentials
Analyze traffic intercepted on public Wi-Fi where someone logged in over plain HTTP. Download the packet capture…
Network Analysis - Plaintext SMTP Attachment
The internal host 10.30.0.25 sent an email to port 25 of the mail server 10.30.0.10 without encryption. Download…
Find Password in Packet Capture
Clear-text HTTP traffic from a shop's internal network was captured. Among many requests, exactly one is the…
Identify Intrusion Time from File Timestamps
Analyze the modification times of the files in evidence/ to identify when the intrusion occurred and which hidden…
Programming - Bash Job Log Analysis
/challenge/jobs.log is a nightly batch log that is regenerated with random data every time the container starts. Each…
Programming - PIN Brute Force
/challenge/vault.json is a vault record that is regenerated with random data every time the container starts. It…
Programming - Hash Verification and Decryption
Analyze the evidence file artifact-manifest.json, which is generated randomly at every start. Each artifact…
Programming - Binary TLV Parsing
/challenge/capture.bin is a custom binary file that is regenerated with random data every time the container starts.…
Find Process in Memory Dump
memory.dump is a simplified text of memory-analysis output (pslist / psscan / cmdline). Find the suspicious process…
Recover Deleted Files
Recover the deleted compressed file (ZIP) from the disk image and find the flag in the memo inside it. Learn how to…
Regular Expressions - The One-Time Golden Glyph
Extract every KINO-four-digits-four-uppercase glyph from data.txt, identify the one occurring once, and submit it to…
Message Hidden in Image LSB
Extract the message hidden in the LSB (Least Significant Bit) of a PNG file. Learn the basics of steganography…