Challenges

Name : OneList CTF #10 - Native Code Analysis

Category : Reverse

Public URL : https://github.com/cywr/android-re-ctfs/tree/main/onelist

Level : Hard (30 pts)

Author : cynychwr

Date : 2025-09-22 13:55:31

Description :

Description: Cross into native code analysis with cross-platform components, hidden data extraction, and multi-component protection systems.

Your Mission: Analyze native libraries, extract hidden data from multiple sources, and understand complex protection mechanisms.

Requirements:

- Native library analysis tools

- Hidden data extraction techniques

- Cross-platform debugging understanding

- Multi-component analysis

- Advanced protection mechanisms

Flag Format: CYWR{...} - Submit only the content inside the braces
Expected Time: 120+ minutes
Hint: Native libraries might activate after other achievements. Multiple sources might contribute to the final solution.

Wall of Fame: Show your native analysis workflow in our advanced techniques documentation!
https://github.com/cywr/android-re-ctfs/blob/main/onelist/WALL.md

🩸 First Blood :

Name : OneList CTF #9 - Advanced Code Analysis

Category : Reverse

Public URL : https://github.com/cywr/android-re-ctfs/tree/main/onelist

Level : Hard (30 pts)

Author : cynychwr

Date : 2025-09-22 13:54:25

Description :

Description: Expert-level challenge simulating advanced techniques with external code loading and complex obfuscation.

Your Mission: Discover and analyze external code loading mechanisms, understand advanced obfuscation, and extract flags from remotely loaded components.

Requirements:

- Advanced obfuscation analysis

- Network behavior monitoring

- External code analysis understanding

- Complex algorithm decryption

- Remote component analysis

Flag Format: CYWR{...} - Submit only the content inside the braces
Expected Time: 90+ minutes
Hint: Look for missing components in standard analysis. Advanced obfuscation might hide critical functionality.

Wall of Fame: Demonstrate your advanced analysis skills in our expert writeup section!
https://github.com/cywr/android-re-ctfs/blob/main/onelist/WALL.md

🩸 First Blood :

Name : OneList CTF #8 - Asset Analysis

Category : Reverse

Public URL : https://github.com/cywr/android-re-ctfs/tree/main/onelist

Level : Medium (15 pts)

Author : cynychwr

Date : 2025-09-22 13:53:30

Description :

Description: Advanced challenge combining UI interactions with hidden data extraction from application assets.

Your Mission: Extract protection keys from application assets and reveal a hidden flag through specific UI trigger sequences.

Requirements:

- UI interaction discovery

- Asset extraction and analysis

- Advanced data protection understanding

- Implementation of complex algorithms

Flag Format: CYWR{...} - Submit only the content inside the braces
Expected Time: 60+ minutes
Hint: UI elements might have hidden functionality. Assets can contain more than their apparent purpose.

Wall of Fame: Share your asset analysis techniques in our community writeups!
https://github.com/cywr/android-re-ctfs/blob/main/onelist/WALL.md

🩸 First Blood : Qbtaumai

Name : OneList CTF #7 - Persistent Storage

Category : Reverse

Public URL : https://github.com/cywr/android-re-ctfs/tree/main/onelist

Level : Medium (15 pts)

Author : cynychwr

Date : 2025-09-22 13:52:15

Description :

Description: Advanced behavioral analysis with persistent storage and complex data protection schemes.

Your Mission: Trigger storage of a protected flag through specific application usage patterns.

Requirements:

- Database analysis

- Complex data protection understanding

- Specific trigger sequence execution

- Data inspection tools

Flag Format: CYWR{...} - Submit only the content inside the braces
Expected Time: 45 minutes
Hint: Special application states might trigger validation. Look for storage entries with unusual characteristics.

Wall of Fame: Document your trigger discovery process at our writeup repository!
https://github.com/cywr/android-re-ctfs/blob/main/onelist/WALL.md

🩸 First Blood : Qbtaumai

Name : OneList CTF #6 - Runtime Behavior

Category : Reverse

Public URL : https://github.com/cywr/android-re-ctfs/tree/main/onelist

Level : Medium (15 pts)

Author : cynychwr

Date : 2025-09-22 13:50:25

Description :

Description: Some secrets only reveal themselves during application runtime through specific user interactions and behavioral triggers.

Your Mission: Trigger runtime flag generation through specific user interactions and locate the protected data.

Requirements:

- Application runtime environment

- Understanding of Android data storage

- App interaction simulation

Flag Format: CYWR{...} - Submit only the content inside the braces
Expected Time: 30 minutes
Hint: User engagement metrics might trigger special behavior. Monitor application data storage after specific actions.

Wall of Fame: Show your behavioral analysis methodology in your GitHub writeup!
https://github.com/cywr/android-re-ctfs/blob/main/onelist/WALL.md

🩸 First Blood :

Name : OneList CTF #5 - Multi-Layer Processing

Category : Reverse

Public URL : https://github.com/cywr/android-re-ctfs/tree/main/onelist

Level : Easy (5 pts)

Author : cynychwr

Date : 2025-09-22 13:49:02

Description :

Description: Complex data processing chains require systematic analysis approaches to understand the transformation steps.

Your Mission: Unravel a multi-step data transformation process.

Requirements:

- Multi-step analysis process

- Algorithm reverse engineering

- Function analysis

Flag Format: CYWR{...} - Submit only the content inside the braces
Expected Time: 15 minutes
Hint: Migration or validation signatures often use complex processing. Work backwards from the final algorithm.

Wall of Fame: Detail your step-by-step analysis process in our community documentation!
https://github.com/cywr/android-re-ctfs/blob/main/onelist/WALL.md

🩸 First Blood : Qbtaumai

Name : OneList CTF #4 - Classical Cryptography

Category : Reverse

Public URL : https://github.com/cywr/android-re-ctfs/tree/main/onelist

Level : Easy (5 pts)

Author : cynychwr

Date : 2025-09-22 13:47:42

Description :

Description: Ancient techniques still find their way into modern applications for data obfuscation.

Your Mission: Find and decode a classically encoded string hidden within the application code.

Requirements:

- Code analysis and algorithm discovery

- Classical cryptography understanding

- Function reverse engineering

Flag Format: CYWR{...} - Submit only the content inside the braces
Expected Time: 5 minutes
Hint: Look for encoding/decoding functions. Historical ciphers often use simple mathematical operations.

Wall of Fame: Explain the technique you discovered in your writeup submission!
https://github.com/cywr/android-re-ctfs/blob/main/onelist/WALL.md

🩸 First Blood : Hoon

Name : OneList CTF #3 - Important Files

Category : Reverse

Public URL : https://github.com/cywr/android-re-ctfs/tree/main/onelist

Level : Easy (5 pts)

Author : cynychwr

Date : 2025-09-22 13:46:54

Description :

Description: Android applications contain various important configuration files that define application behavior and metadata.

Your Mission: Analyze critical application files for hidden information.

Requirements:

- File analysis capabilities

- Data format understanding

Flag Format: CYWR{...} - Submit only the content inside the braces
Expected Time: 5 minutes
Hint: Look for suspicious values in application metadata that don't appear to be standard configuration.

Wall of Fame: Document your analysis process and contribute to our community writeups!
https://github.com/cywr/android-re-ctfs/blob/main/onelist/WALL.md

🩸 First Blood : MrNOODLE

Name : OneList CTF #2 - Build Secrets

Category : Reverse

Public URL : https://github.com/cywr/android-re-ctfs/tree/main/onelist

Level : Easy (5 pts)

Author : cynychwr

Date : 2025-09-22 13:45:03

Description :

Description: Developers often store configuration data in various formats throughout their applications.

Your Mission: Locate and reveal the build environment configuration flag.

Requirements:

- Application analysis tools

- Data format understanding

Flag Format: CYWR{...} - Submit only the content inside the braces
Expected Time: 2 minutes
Hint: Build configurations might contain processed strings. Look for validation functions.

Wall of Fame: Share your writeup on our GitHub repository for recognition!
https://github.com/cywr/android-re-ctfs/blob/main/onelist/WALL.md

🩸 First Blood : kmofta7

Name : OneList CTF #1 - First Steps

Category : Reverse

Public URL : https://github.com/cywr/android-re-ctfs/tree/main/onelist

Level : Easy (5 pts)

Author : cynychwr

Date : 2025-09-22 13:42:27

Description :

Description: Welcome to the OneList Android CTF! This progressive challenge series will take you from beginner to expert Android reverse engineering.

Your Mission: Find the first flag hidden within the application.

Requirements:

- Download the OneList APK from the GitHub repository

- Analyze the application structure

Flag Format: CYWR{...} - Submit only the content inside the braces
Expected Time: 30 seconds
Hint: Start with the most obvious places where developers store text content.

Wall of Fame: Complete this challenge and publish a writeup following our submission guide to be featured on our Wall of Fame!
https://github.com/cywr/android-re-ctfs/blob/main/onelist/WALL.md

🩸 First Blood : MrNOODLE

Name : Revquations

Category : Reverse

Level : Hard (30 pts)

Author : D0pp3lgang3r

Date : 2023-08-06 11:28:31

Description : Hey I've found this binary, and I can't reverse it... Could you help me ???

🩸 First Blood : croucroute

Name : Plane2

Category : Misc

Level : Medium (15 pts)

Author : motus292

Date : 2022-07-15 23:03:58

Description : Be Observant, Decrypt info, the flag is well hidden, peraphs you will Fuck your Head to solve Corrupted flag...

🩸 First Blood : croucroute

Name : FindMe2

Category : Reverse

Level : Hard (30 pts)

Author : motus292

Date : 2022-07-11 15:20:14

Description : Be Patient...They are so many flags ! 5,4,3... Go, Go, Go

🩸 First Blood : croucroute

Name : FindMe

Category : Reverse

Level : Medium (15 pts)

Author : motus292

Date : 2022-07-03 12:53:02

Description : Executable in .Net6 can be used on Windows or Linux

🩸 First Blood : vozec

Name : Appearances

Category : Steganography

Level : Medium (15 pts)

Author : motus292

Date : 2022-06-26 10:22:11

Description : Beware of appearances... Last can be first

🩸 First Blood : D0pp3lgang3r

Name : Plane

Category : Steganography

Level : Medium (15 pts)

Author : motus292

Date : 2022-06-19 17:39:54

Description : Format is not alone...

🩸 First Blood : D0pp3lgang3r

Name : Noto syllabs

Category : Steganography

Level : Medium (15 pts)

Author : D0pp3lgang3r

Date : 2022-06-18 15:33:22

Description : Weird image, isn't it ?

🩸 First Blood : croucroute

Name : TryHard

Category : Cryptology

Level : Easy (5 pts)

Author : Ant_ONE

Date : 2022-06-14 00:14:39

Description : Again and again and again...

🩸 First Blood : D0pp3lgang3r

Name : CEO 2

Category : OSINT

Level : Medium (15 pts)

Author : D0pp3lgang3r

Date : 2022-06-05 21:08:00

Description : On continue dans la série des principales sociétés du CAC 40, cette fois-ci vous allez devoir trouver qui est la personne sur cette photo, afin de retrouver la date de naissance de son frère, au format anglophone 13/06/2019 => 06/13/2019.

🩸 First Blood : penthium2

Name : CEO 1

Category : OSINT

Level : Medium (15 pts)

Author : VirtualSamurai

Date : 2022-06-04 13:00:17

Description : In this OSINT challenges series you'll train to grab intel about the CEOs of major companies listed on the CAC 40 (The french stock exchange). In this first mission, you'll need to identify the current CEO of the Air Liquid company. Then you'll need to find his wife's birthdate. The flag is a birthdate in the english format Month/Day/Year (Exemple: 07/28/1982).

🩸 First Blood : D0pp3lgang3r

Name : Blockchain

Category : OSINT

Level : Medium (15 pts)

Author : D0pp3lgang3r

Date : 2022-05-21 02:35:14

Description : We’re on the trail of a hacker hiding behind multiple aliases, the only trail we have is a twitter account "FishingFake". He allegedly exploited a chrome extension, in order to steal cryptocurrencies, from various people. In addition, we know that he is in direct contact with the 2 founders of the company, which is itself behind the extension. Your mission is to find the first and last names of its founders. Flag Format : BS{firstname1_name1_firstname2_name2}

🩸 First Blood : 0wnes1s

Name : DNA

Category : Cryptology

Level : Easy (5 pts)

Author : D0pp3lgang3r

Date : 2022-05-21 02:34:05

Description : We BASE our security on DNA cipher...

🩸 First Blood : 0wnes1s

Name : Pseudo AES

Category : Programming

Level : Hard (30 pts)

Author : D0pp3lgang3r

Date : 2022-05-21 02:31:26

Description : Cet algorithme de chiffrement pour E-CORP, est il sécurisé ! A vous de le casser !

🩸 First Blood : vozec

Name : ELFx86 - Out Of Bounds write 1

Category : Pwn

Level : Easy (5 pts)

Author : Podalirius

Date : 2021-05-29 19:30:06

Description : This service is vulnerable, can you exploit it to retrieve the flag ? To access this challenge, you need to connect to the CTF VPN. - The challenge is running on the PwnBox (10.10.10.253) on port 10003 - You can retreive the binary file from http://10.10.10.253:10002/

🩸 First Blood : penthium2

Name : So Many Zips 2

Category : Programming

Level : Medium (15 pts)

Author : croucroute

Date : 2021-04-30 20:43:50

Description : On reprend le principe de Podalirius et on complexifie...

🩸 First Blood : jeanvivine

Name : Python - Format String Bug

Category : Pwn

Level : Easy (5 pts)

Author : Podalirius

Date : 2021-04-19 21:50:33

Description : This python3 service is vulnerable, can you retrieve the flag ? To access this challenge, connect to the CTF VPN, and access the PwnBox (10.10.10.253) on port 10001 nc 10.10.10.253 10001

🩸 First Blood : Elweth

Name : No Dash

Category : Web

Public URL : https://nodash.cyberwave.network

Level : Easy (5 pts)

Author : D0loresH4ze

Date : 2021-04-05 16:08:19

Description : Let's study basics about NoSQL !

🩸 First Blood : Podalirius

Name : Living QR Code

Category : Programming

Level : Medium (15 pts)

Author : Podalirius

Date : 2021-02-20 14:44:13

Description : Is it alive ? Find what is says !

🩸 First Blood : 0wnes1s

Name : So Many Zips

Category : Programming

Level : Easy (5 pts)

Author : Podalirius

Date : 2021-02-20 14:43:34

Description : This file was compressed (ZIP) multiple times. Can you decompress it ?

🩸 First Blood : croucroute

Name : ELF x86 - CrackMe Basic

Category : Reverse

Level : Easy (5 pts)

Author : Podalirius

Date : 2021-02-20 14:41:24

Description : Find the validation password of this crackme to get the flag.

🩸 First Blood : croucroute

Name : Python Bytecodes

Category : Reverse

Level : Easy (5 pts)

Author : Podalirius

Date : 2021-02-20 14:40:27

Description : You found a compiled python library, find how you can use it, and extract the flag !

🩸 First Blood : 0wnes1s

Name : ELF x64 - BaseJumper CrackMe

Category : Reverse

Level : Hard (30 pts)

Author : Podalirius

Date : 2021-02-20 14:34:18

Description : Find the input validating the crackme, and you'll have the flag !

🩸 First Blood : croucroute

Name : ELF x64 - Right on Time

Category : Reverse

Level : Medium (15 pts)

Author : Podalirius

Date : 2021-02-20 14:33:48

Description : This binary seems weird, it just prints a different number each time. Try to find out what the input needs to be to validate this crackme and get the flag.

🩸 First Blood : 0wnes1s

Name : Monkey Island

Category : Misc

Level : Medium (15 pts)

Author : croucroute

Date : 2021-02-14 00:14:36

Description : Ce matin, En faisant le ménage dans son bateau, Guybrush Threepwood a trouvé au fond d'une malle un vieux parchemin ainsi qu'une étrange roue....

🩸 First Blood : penthium2

Name : OWASP5_Broken_Access_Control

Category : Web

Public URL : https://owasp5.cyberwave.network

Level : Easy (5 pts)

Author : nishacid

Date : 2021-02-06 15:03:11

Description : Series of challenges introducing to the top 10 OWASP vulnerabilities.

🩸 First Blood : Mizari

Name : OWASP4_XML_External_Entities

Category : Web

Public URL : https://owasp4.cyberwave.network

Level : Easy (5 pts)

Author : nishacid

Date : 2021-02-06 15:01:06

Description : Series of challenges introducing to the top 10 OWASP vulnerabilities.

🩸 First Blood : croucroute

Name : Anonymous

Category : Misc

Level : Easy (5 pts)

Author : 0wnes1s

Date : 2021-02-05 13:51:08

Description : Your team is on the hunt for an as yet anonymous person who recently received a BitCoin transaction. Your mission is to find the nickname this person uses and the block hash of their last transaction. You have, at your disposal, a network capture of an exchange of messages carried out on an exit node tor corrupted by your team. PS: on this chat system, nicks are generated randomly. Good luck flag (lower case): nickname:block_transaction_hash

🩸 First Blood : croucroute

Name : Audio but no image...

Category : Steganography

Level : Medium (15 pts)

Author : iwa

Date : 2021-02-04 16:14:04

Description : I'm watching TV but no image appear, I only have the audio... Try to get the image and have the flag. Flag format : BS{FLAG}

🩸 First Blood : croucroute

Name : OWASP3_Sensitive_Data_Exposure

Category : Web

Public URL : https://owasp3.cyberwave.network

Level : Easy (5 pts)

Author : nishacid

Date : 2021-01-30 17:50:05

Description : Series of challenges introducing to the top 10 OWASP vulnerabilities.

🩸 First Blood : Elweth

Name : OWASP2_Broken_Authentication

Category : Web

Public URL : https://owasp2.cyberwave.network

Level : Easy (5 pts)

Author : nishacid

Date : 2021-01-17 20:30:54

Description : Series of challenges introducing to the top 10 OWASP vulnerabilities.

🩸 First Blood : penthium2

Name : OWASP1_Injection

Category : Web

Public URL : https://owasp1.cyberwave.network

Level : Easy (5 pts)

Author : nishacid

Date : 2021-01-17 20:21:21

Description : Series of challenges introducing to the top 10 OWASP vulnerabilities.

🩸 First Blood : Elweth

Name : Jeankev's Song

Category : Misc

Level : Easy (5 pts)

Author : jeanvivine

Date : 2021-01-15 21:56:28

Description : jeankev loves listening brute forcing music on his free time ! Find the song, find the flag !

🩸 First Blood : 0wnes1s

Name : Cyb3rPunk

Category : Steganography

Level : Medium (15 pts)

Author : nishacid

Date : 2021-01-12 10:11:42

Description : A Hacker has found a message hidden in an image and has simplified the task for hackers who stil haven't understood the message. Find this message now !

🩸 First Blood : 0wnes1s

Name : Punchcard

Category : Cryptology

Level : Medium (15 pts)

Author : iwa

Date : 2021-01-11 11:56:07

Description :

Decode this punchcard Flag format: bs{FLAG} where FLAG is the actual flag to submit.

🩸 First Blood : Bonzi

Name : Phone

Category : Misc

Level : Medium (15 pts)

Author : iwa

Date : 2021-01-09 21:32:50

Description : Those old phones...Can you find the name of the city ?

🩸 First Blood : 0wnes1s

Name : XOR

Category : Cryptology

Level : Medium (15 pts)

Author : look

Date : 2021-01-08 18:53:27

Description : This is an encrypted image. Try to decrypt it.

🩸 First Blood : 0wnes1s

Name : Organigramme

Category : Programming

Level : Medium (15 pts)

Author : 0wnes1s

Date : 2020-12-07 22:13:57

Description : Your team found a file encrypted by the proprietary E-Crypt algorithm developed by E-Corp. One of your teammates managed to obtain the code flowchart that allows to encrypt a file thanks to the E-Crypt algorithm. You must read the flowchart and understand the algorithm to develop a tool to decrypt the file.

🩸 First Blood : croucroute

Name : Grub In Love

Category : Forensics

Level : Medium (15 pts)

Author : nishacid

Date : 2020-11-14 19:55:57

Description : A hacker managed to penetrate a server of your company and changed the accesses, unfortunately, this server contains important files. It's up to you to find a way to enter the server and get your hands on it again.

🩸 First Blood : 0wnes1s

Name : Be Local Man

Category : Web

Public URL : http://belocalman.cyberwave.network

Level : Easy (5 pts)

Author : nishacid

Date : 2020-11-14 18:47:10

Description : We managed to manage connections to the admin panel via private IP addresses. It will therefore no longer be necessary to log in with a login and password when you are connected to the company's internal network. Access is managed via local IP addresses (192.168.1.XXX) connected to your machines via our DHCP server.

🩸 First Blood : PsyKatChou

Name : backup

Category : OSINT

Level : Hard (30 pts)

Author : 0wnes1s

Date : 2020-11-07 18:46:09

Description : You have a great source of informations about an individual, use them to be able to brute force his hashed password. Flag format: `<password_found>'.

🩸 First Blood : look

Name : Keep Robots Away

Category : Web

Public URL : https://robots.cyberwave.network

Level : Easy (5 pts)

Author : 0x66

Date : 2020-10-04 16:40:35

Description : Can you find a way to login to this page ?

🩸 First Blood : nishacid

Name : Pwn The Web

Category : Web

Public URL : https://pwnw3b.cyberwave.network

Level : Hard (30 pts)

Author : 0x66

Date : 2020-09-21 22:52:04

Description : Sometimes you have to understand others if you want to talk to them.

🩸 First Blood : croucroute

Name : RSA

Category : Cryptology

Level : Medium (15 pts)

Author : look

Date : 2020-07-26 10:08:05

Description : Decrypt this RSA

🩸 First Blood : 0wnes1s

Name : Alternance

Category : Cryptology

Level : Easy (5 pts)

Author : look

Date : 2020-07-21 17:51:15

Description : One alternates then alternates and so on.

🩸 First Blood : croucroute

Name : tracking

Category : OSINT

Level : Easy (5 pts)

Author : 0wnes1s

Date : 2020-07-19 17:27:54

Description : You found this file containing coordinates. Flag format: `FLAG_...` (in upper case)

🩸 First Blood : croucroute

Name : 1+1=2

Category : Reverse

Level : Medium (15 pts)

Author : saymant

Date : 2020-07-06 19:03:19

Description : Find the right input so that the program displays the validation message, the flag.

🩸 First Blood : 0wnes1s

Name : Cryptogram_2

Category : Cryptology

Level : Hard (30 pts)

Author : 0wnes1s

Date : 2020-07-06 07:18:27

Description : One of our agents discovered this in a hideout during his scouting mission. He has no idea what this mysterious letter is about, but he has heard some people talk about 'code'. We sent experts to the field to find out more. We are sending you the pictures taken by our agent anyway. You might be able to decipher this message.

🩸 First Blood : croucroute

Name : atn

Category : Cryptology

Level : Easy (5 pts)

Author : Katjushai

Date : 2020-07-01 21:56:32

Description :

An image was found... But we do not know what is hidden in it...

🩸 First Blood : Azing

Name : Hodor

Category : Web

Public URL : https://hodor.cyberwave.network

Level : Medium (15 pts)

Author : 0x66

Date : 2020-06-29 23:03:02

Description : Your friend Hodor is starting in web development, so he created his first website, but he focused more on design than on security...

🩸 First Blood : PsyKatChou

Name : logged

Category : Forensics

Level : Easy (5 pts)

Author : 0wnes1s

Date : 2020-06-28 14:26:21

Description : The E-Corp employee who was having fun attacking the company struck again. He used a blank laptop computer intended for trainees. The technicians made a copy of the disk. The network administrators discovered connections made via the IP assigned to the employee's computer. You need to scan the disk image to see what the employee did.

🩸 First Blood : croucroute

Name : Image

Category : Steganography

Level : Easy (5 pts)

Author : Katjushai

Date : 2020-06-24 14:26:24

Description : Jason found some images on a recovered computer He doesn't know what's in them, help him, find something.

🩸 First Blood : croucroute

Name : grisbiland

Category : OSINT

Level : Medium (15 pts)

Author : penthium2

Date : 2020-06-18 22:38:19

Description :

We have suspicions of cash counterfeiting on a user of a social network and anything to do with easy money. All we know is that he calls himself 'grisbiland'. Locate and retrieve the name of the 'grisbiland' counterfeit currency store. 

Flag format: `` (lowercase) (ex: `macdonalds`)

🩸 First Blood : 0wnes1s

Name : Unknown Material

Category : OSINT

Level : Easy (5 pts)

Author : 0wnes1s

Date : 2020-06-16 10:29:53

Description :

A new company has set up near you. The network administrators have just installed the hardware. While rummaging through the garbage, you found this picture. Identify the hardware, to recover: - The serial name of this equipment. - The default passphrase / passphrase. 

Flag format: `STRING:STRING` (upper case)

🩸 First Blood : penthium2

Name : Randomless

Category : Forensics

Level : Hard (30 pts)

Author : 0wnes1s

Date : 2020-06-15 19:50:42

Description : We were able to recover a copy of a partition of a hard disk belonging to a hacker on the machine 'swift'. Its purpose was to disable the air conditioning in our laboratory. An encrypted file was discovered, your mission is to decrypt it to extract its contents.

🩸 First Blood : penthium2

Name : Caesar X ASCII

Category : Cryptology

Level : Easy (5 pts)

Author : 0wnes1s

Date : 2020-06-15 19:08:39

Description : A person has encrypted a message with caesar encryption, but it's not just the letters of the alphabet.

🩸 First Blood : croucroute

Name : Ada

Category : Steganography

Level : Easy (5 pts)

Author : 0wnes1s

Date : 2020-06-15 11:40:44

Description : Ada Lovelace

🩸 First Blood : croucroute

Name : It's 1337 time

Category : Programming

Level : Easy (5 pts)

Author : 0x66

Date : 2020-06-10 21:33:29

Description : 1 - Retrieve all prime numbers between 1337 and 148608. 2 - Add all these numbers. 3 - Subtract 966923583 from the sum to obtain the flag. Flag format: `<integer>`

🩸 First Blood : 0wnes1s

Name : evil-employee

Category : Forensics

Level : Medium (15 pts)

Author : 0wnes1s

Date : 2020-06-10 20:51:29

Description :

Following an internal attack at E-Corp, the computers of all employees were scanned. One computer has been suspiscious according to the analysts. An image of its hard disk was sent to you as an attachment. You have to find out the identity of the person and the name of his operation at all costs. The purpose of the operation was to destroy the company's storage servers. 

Flag format: `md5(:)`. = first and last name of the employee (lower case and no spaces) = name of his operation

🩸 First Blood : croucroute

Name : new password

Category : Network

Level : Medium (15 pts)

Author : 0wnes1s

Date : 2020-06-09 22:20:55

Description : One of the administrators noticed the intrusion attempt on the ecorp.com website and changed his password. Fortunately, you were able to run tcpdump on the server. You don't have a nice pcap file, but you have the essentials to retrieve the new password. Flag format: `<new_passwd>`

🩸 First Blood : croucroute

Name : proc's & net

Category : Network

Level : Easy (5 pts)

Author : 0wnes1s

Date : 2020-06-09 12:41:20

Description :

E-Corp's server has been breached, here's what you have been sent. It's up to you to find out who logged on to the server and by which service it came in. 

Flag format: `:`

🩸 First Blood : cogitot

Name : CloudFlare

Category : Cryptology

Level : Medium (15 pts)

Author : 0wnes1s

Date : 2020-06-08 15:21:18

Description : One of your contacts sends you an obfuscated message. All he knows is that the original message contains 30 characters. It's up to you to find the algo and you to decipher it.

🩸 First Blood : croucroute

Name : NetBIOS

Category : Cryptology

Level : Medium (15 pts)

Author : 0x66

Date : 2020-06-07 22:31:21

Description :

Your colleague has intercepted an unreadable string of characters. It's up to you to try to read it. The only information he has is that it is not standardised.

🩸 First Blood : 0wnes1s

Name : trame from scratch

Category : Network

Level : Medium (15 pts)

Author : 0wnes1s

Date : 2020-06-06 22:11:17

Description :

A new technology company is under construction near you. During the installation of the optic fiber, you managed to connect to the cable, to retrieve the light signals. Once the signals are decoded in binary, you have to reformat the ethernet frame and find the source mac address and the destination ip address. 

Flag format: `:` (ex: `a1:b2:c3:d4:e5:f6:10.10.10.1`)

🩸 First Blood : Vergogne

Name : Hack_The_Planet

Category : Forensics

Level : Medium (15 pts)

Author : 0wnes1s

Date : 2020-06-06 18:30:27

Description :

'Zero Cool' was able to recover several parts of a backup file belonging to 'Acid Burn'. He needs to exploit these files to be able to recover at least the username and password of this hacker. 

Flag format - user:password

🩸 First Blood : FrenchMS

Name : Cryptogram

Category : Cryptology

Level : Medium (15 pts)

Author : 0wnes1s

Date : 2020-06-06 18:09:33

Description : 'Ben', a DGSE agent, goes after his colleague 'Will'. They formed a team, code name 'doubleZero'. Will was in charge of deciphering a mysterious message found on an island. Having no more contact with Will, Ben decided to go to the HQ where Will was hiding. He found a mysterious cryptogram with some notes from Will. Flag format: `flag{...}`

🩸 First Blood : cKw

Name : zombie2

Category : Steganography

Level : Medium (15 pts)

Author : 0wnes1s

Date : 2020-06-04 08:51:03

Description : On dirCEEEERVEAU qu'il yCEEEERVEAU a un problème avCEEEERVEAU les systèmes dCEEEERVEAU putCEEEEERVEAU ça commence à me faire chiCEEEEERVEAU.

🩸 First Blood : 0x66

Name : Walross

Category : Steganography

Level : Medium (15 pts)

Author : 0wnes1s

Date : 2020-06-04 08:42:49

Description : 0dob3nu5 r0sm4ru5

🩸 First Blood : 0x66

Name : Snow and fog

Category : Steganography

Level : Easy (5 pts)

Author : 0wnes1s

Date : 2020-06-04 08:36:33

Description : Snow and fog.

🩸 First Blood : myDonut

Name : Extension

Category : Steganography

Level : Easy (5 pts)

Author : look

Date : 2020-06-03 20:07:37

Description : This is a very strange image.

🩸 First Blood : 0wnes1s

Name : izi auth

Category : Reverse

Level : Easy (5 pts)

Author : nasm

Date : 2020-05-31 22:33:07

Description : Try to find the pass, the short one ;)

🩸 First Blood : 0x66

Name : Isseo Santiano

Category : OSINT

Level : Medium (15 pts)

Author : VirtualSamurai

Date : 2020-02-26 02:55:36

Description :

Your mission is to track an oligarch who has defrauded millions and owns many dummy corporations. He owns a yacht whose name we don't know. Your goal is to find the IMO identifier of this yacht and to enter it in order to validate the challenge. You have attached a beautiful picture of the oligarch's yacht on the water. 

Flag format: `NUMBER`

🩸 First Blood : PoutPout

Name : 99D8EA

Category : Steganography

Level : Easy (5 pts)

Author : D0loresH4ze

Date : 2020-01-26 18:15:37

Description : Maybe this color is hiding something from us! Find out what it contains. Flag format : BS{...}

🩸 First Blood : Mika

Name : WhiteRose

Category : Forensics

Level : Easy (5 pts)

Author : VirtualSamurai

Date : 2020-01-25 00:01:40

Description :

You took your laptop to a creepy repair shop. Once recovered, you turn it on and there's a new unknown image on the file system. 

Can you check what it's all about ?

🩸 First Blood : benbelluci

Name : Geolocalization

Category : Steganography

Level : Easy (5 pts)

Author : D0loresH4ze

Date : 2020-01-23 16:26:01

Description : You have intercepted this message, you suspect that the text is hiding something, find out what it's hiding! After a fine analysis, you took notes : , , , . : ; ? ! / punctuation, number / upwards

🩸 First Blood : palenath

Name : Shibuya

Category : Steganography

Level : Medium (15 pts)

Author : D0loresH4ze

Date : 2020-01-23 16:10:52

Description : You have found this picture of a district of Tokyo. But when you look closer, it doesn't match. Flag format: BS{...}

🩸 First Blood : Mika

Name : Choix

Category : Steganography

Level : Easy (5 pts)

Author : D0loresH4ze

Date : 2020-01-23 15:32:58

Description : You have just recovered this audio file, however, it has a strange sound. Find out what's behind it. Flag format: `BS{...}`

🩸 First Blood : xanhacks

Name : Basic_Auth

Category : Network

Level : Easy (5 pts)

Author : VirtualSamurai

Date : 2020-01-22 01:24:29

Description :

During one of your pentests, you managed to capture a communication through the HTTP protocol.

Can you find any password in it ? 

🩸 First Blood : Mika

Name : FTP

Category : Network

Level : Easy (5 pts)

Author : VirtualSamurai

Date : 2020-01-21 15:56:46

Description :

You managed to steal a file containing a capture of a communication between two machines via the FTP protocol. 

Find the password of the user that accessed the FTP server.

🩸 First Blood : Mika

Name : Atbash

Category : Cryptology

Level : Easy (5 pts)

Author : VirtualSamurai

Date : 2020-01-20 16:44:41

Description :

From this file containing a mysterious message, you will have to find the flag of the challenge which will be in UPPER case.

🩸 First Blood : Mika