Practice Challenges

We have received a photograph that needs investigation. Can you find the following information?

We have received a photograph that needs investigation. Can you find the following information?

We have intercepted a message written in a strange language, see if you can decrypt it. 

We recorded a beautiful session with Ichika Nito the other day. Unfortunately, a group of mischievous teens broke into our studio and messed with the frequency log data. We need the piece for our marketing, so it is crucial that you find the frequency that was manipulated so that we don’t make our customers’ ears bleed!

A password hash was retrieved that needs to be cracked. We have received intel that the password is from the RockYou breach. Target Hash: `1a3dff6f600d9fd62f8ead361480cc61`

A Windows password hash was retrieved that needs to be cracked. Can you retrieve the original password? Target Hash: `CB71EF0DA0400E47CCF9155E3E7DB453:C19E106F17653CDD586B95313D2053CA`

A password hash was retrieved that needs to be cracked. We have received intel that the password is of the format `THP-PASS-####` where `#` is a number 0-9. Target Hash: `a9fe58ebbe541f23dcb988ac47e7ee6f`

We have intercepted a PDF file but it seems to be protected with a password. Can you find a way through?

A password hash was retrieved that needs to be cracked. We have received intel that the password is a Netflix movie or show with a number at the end. Can you crack the password? Target Hash: `427e3d9c817de20912d9838f1f2ad7d0`

A password hash was retrieved that needs to be cracked. We have received intel that the password is vehicles but have some sort of rule affecting them. Target Hash: `7d2eec8b9a92dd4d4dde274e09031129`

A password hash was retrieved that needs to be cracked. We know it's based on animals but there's some weird prepending & appending with numbers and common special characters. Can you crack the hash? Target Hash: `9ac155fa85bf02a8712c1498c1c58799`

A covert monitoring system known as Phantom Wiretap captured a stream of suspicious network traffic from a compromised internal workstation. Investigators believe the user was communicating with hidden infrastructure and exfiltrating encoded data through DNS queries.

Below is a raw Ethernet frame captured from a somwhere in Romania. Dissect the Ethernet frame and analyze the encapsulated data.

We have received an image which seems to contain hidden info. Can you find it?

We have intercepted a dank meme. Unfortunately, it seems to be corrupted. Can you fix it?

We have received an image that is hiding something. See if you can find the secret.

We have received an image that is hiding something. See if you can find the secret.

We have received an image of a robot that is hiding something. We know that there's a password involved which is name of this robot (no spaces, lowercase). See if you can find the secret.

We've identified a website hiding suspicious information that doesn't let you inspect.

It seems like some clanker hid something on this website. Can you find the flag? Flag Format: `thp{}`

Can you find the flag on my notes website? (NOTE: Bruteforcing web challenges is out of scope and should not be done.)

We found a website for a game called Top Card Maverick. However, it seems to be rigged. Fortunately, it seems that we can modify our card deck. Can you find a way to guarantee a win?

We have created a python script for you to break into as training. See if you can figure out a password that will authenticate with the program.

We have created a binary for you to break into as training. See if you can figure out a password that will authenticate with the program.

We've got a vulnerable binary. See if you can exploit it and get the flag. NOTE: These challenges are hosted on a server with a flag.txt not given to you. We're too broke for a server right now so we're giving you the flag.txt file to solve locally.