Challenge list
ProgrammingLevel 5★★★★★Advanced Python - Concurrent Event DAG Correlation
events.jsonl interleaves randomly ordered events from many services and traces. Starting from the marked auth.failed…
General SkillsLevel 5★★★★★Red Teaming - Custom C2 Framework
No C2 server, agent, socket communication, or command execution is started. Analyze the local…
General SkillsLevel 5★★★★★Anti-Forensics - Evidence Elimination
After the intrusion the attacker covered their tracks: they cut a time window out of `/challenge/auth_syslog.log` (the…
General SkillsLevel 5★★★★★Custom Malware - Stealth Techniques
No executable malware, injection, or evasion capability is included. Analyze the inert configuration sample…
General SkillsLevel 5★★★★★Cloud Pentesting - AWS Multi-Stage Attack
Do not use AWS credentials, a metadata endpoint, or Lambda. Analyze the local artifacts/aws/cloudtrail-chain.jsonl…
General SkillsLevel 5★★★★★Container Escape - Kubernetes Privilege Escalation
Do not use a Kubernetes API, host mount, privileged container, or escape. Read the static…
General SkillsLevel 5★★★★★Supply Chain Attack - Dependency Exploitation
Audit the dependency records of the Node.js app `kinoco-webapp`: `/challenge/dependencies.txt` (the dependencies…
General SkillsLevel 5★★★★★Pivoting - Multi-Tier Network Penetration
Analyze the prerecorded artifacts/pivot/topology.json without creating routes, tunnels, proxies, or remote services.…
General SkillsLevel 5★★★★★Fuzzing Basics - 0-day Discovery
Analyze the prerecorded crash set without running a fuzzer or target binary. artifacts/fuzzing/triage.csv lists each…
ProgrammingLevel 5★★★★★Programming - APT Timeline Analysis
/challenge/events.jsonl combines security logs collected from several hosts and is regenerated with random data every…
ProgrammingLevel 5★★★★★Programming - AST-Based Vulnerability Detection
/challenge/corpus/*.py are Python sources for code review, regenerated with random data every time the container…
ProgrammingLevel 5★★★★★Programming - AWS Permission Analysis
/challenge/iam.json holds users, groups and policies and /challenge/s3_objects.json lists S3 objects (bucket, key,…
ProgrammingLevel 5★★★★★Programming - IoT Firmware Analysis
Analyze the network-camera firmware image firmware.bin, which is generated randomly at every start (it contains no…
ProgrammingLevel 5★★★★★Programming - Coverage-Guided Fuzzing
Analyze the coverage-guided fuzzer run record coverage-queue.jsonl, which is generated randomly at every start (the…
ProgrammingLevel 5★★★★★Programming - Zero-Click Message Analysis
messages.ndjson is the traffic log of a messaging app, built from random data at every start (in /challenge). Each…
ProgrammingLevel 5★★★★★Programming - Timing Attack Data Analysis
timings.csv is raw timing-attack measurements built from random data at every start (in /challenge). Against a server…