A collection of CTF challenges I’ve authored and set for events such as HNF and YCEP, spanning infrastructure hacking, forensics, OSINT, cryptography, web exploitation, and more. Every challenge below links to my own writeup for it, searchable and filterable below.
Showing 25 of 25 writeups
I heard encoding and encryption are 2 different things. Not sure whether this is useful.
Oh no! My French pen pal accidentally encrypted the contents of a few top-secret files, and things took an acidic turn! Now his boss is as sour as ...
An IT staff on the internal network (10.0.0.0/24) reported unauthorised data transfers! We managed to capture some network traffic from the ...
What do you know about File Transfer Protocol (FTP)? I’ve heard many people call it the Flag Transfer Protocol!
There’s more than meets the ear. I think there’s something hidden in this audio.
This is a binwalk practice challenge to be gone through during the workshop.
This is a practice challenge that will be gone through during the workshop.
You’ve received an unusual WAV file - but it doesn’t feel quite right. Could there be more to this sound than meets the ear? Do note that the flag is case-sensitive.
The flag’s lost in the chaos of files, lurking in the shadows. Well, all I can say is that it’s well hidden, I hope!
30 files, each locked behind a SHA-256 checksum, and the task is clear: figure out which one has the real flag. It’s like being handed a stack of cryptic treasure maps and told, “Good luck, no pressure!” Checksum: a91561aa9ce79c721f66a7d846128df4f81d11937fd723860ad92547ff2e814e
Triton Academy appears unremarkable at first glance, just another corner of the web with tidy pages and familiar promises ...
Triton Academy appears unremarkable at first glance, just another corner of the web with tidy pages and familiar promises ...
Automation is becoming increasingly popular! This system’s automated butler, however, seems a bit too friendly. Perhaps we could coerce it to see what kind of secrets it would reveal? Rules of Engagement: The flag is located at /home/[username]/flag.txt.
You’ve intercepted a list of valid usernames for the NULL.LOCAL office network! A critical security misstep left some employee accounts vulnerable ...
git commit -m ‘feat: IDK what I did, help ples’
People always say light is at the end of the tunnel, but how about the flag?
I was told that the flag is separated into 3 files, but I can’t seem to retrieve it and I don’t know what’s wrong…
I hope you paid attention during the Linux workshop. What does grep do again? Flag is in the following format: YCEP25{flag}
I unintentionally scrambled the content of a file, but thankfully the lines are previously labelled with their corresponding line numbers ...
I’m a big fan of Nezha! I heard that the recent animated movie, Nezha 2, has been breaking records and setting new industry milestones ...
A few months back, I stumbled upon this amazing dining place in Johor Bahru, Malaysia. It had cozy vibes, delicious food, and the best part? They had live music playing in the background.
My brother told me about this aesthetic cafe with perfect vibes and cozy corners. The only problem? I have no clue where it is.
In 1904, a young boy disappeared without a trace from a small town in Indiana, USA - a case that remains one of the state’s most unsettling mysteries ...
Someone once told me “Why settle for boring old robots.txt when you can have clankers.txt guarding your website?”
Cocomelon specializes in 3D animation videos of traditional nursery rhymes and original children’s songs… I think? Pretty sure that’s how kids ...
No writeups match your filters.