Cybersecurity CTF challenges
Choose a domain and difficulty, inspect the evidence, and verify each conclusion in a safe environment.
Programming Level 5 Programming - APT Timeline Analysis
timeline.jsonl is generated from the FLAG injected at startup. Filter exfiltration events, order by part, reverse…
Programming Level 5 Programming - AST-Based Vulnerability Detection
audit_samples.py is generated from the FLAG injected at startup. AST-detect shell=True and hex-decode review_token…
Programming Level 5 Programming - AWS Permission Analysis
cloud_inventory.json and approved.json are generated from the FLAG injected at startup. Verify forensic-reader's…
Programming Level 5 Programming - IoT Firmware Analysis
firmware.bin is generated from the FLAG injected at startup. Verify the KFW1 integrity tag and parse salt, length, and…
Programming Level 5 Programming - Coverage-Guided Fuzzing
coverage-queue.jsonl is generated from the FLAG injected at startup. Order Base64 inputs by offset and XOR-decrypt…
Programming Level 5 Programming - Zero-Click Message Analysis
messages.ndjson is generated from the FLAG injected at startup. Order payloads by sequence and XOR-decrypt with 0x31…
Programming Level 5 Programming - Timing Attack Data Analysis
timings.csv is generated from the FLAG injected at startup. Join the candidate with maximum median_us at every…
Forensics Level 5 Detect Process Hollowing Attack
Compare `process_list.txt` with `image_regions.txt` to detect process hollowing. The target process has a PRIVATE, RWX…
Forensics Level 5 Detect Tampered Timestamps
Analyze the NTFS-like timeline in `mft_timeline.csv` and compare each file's SI and FN timestamps. The physically…
Forensics Level 5 Decrypt Encrypted iOS Backup
Perform encrypted-iOS-backup password verification with a safe iTunes metadata fixture. No real iPhone or backup is…
Cryptography Level 5 Cryptanalysis - RSA e=3 Broadcast Attack
broadcast.json contains the same plaintext encrypted with unpadded RSA e=3 under three pairwise-coprime moduli.…
Forensics Level 5 Create Memory Profile for Unknown Linux Kernel
Perform custom Linux-kernel memory-profile matching with a safe static fixture. Match the BUILD_ID records in vmlinux,…
Forensics Level 5 Decode Custom Protocol C&C Communication
Analyze the endpoint beacon record `beacon.log` and decode the covert channel hidden among decoy traffic.…