Capture the flag arena

Identify how the web application assembles SQL queries and bypass the authentication boundary using a crafted payload.

Recover prime factors from a deliberately weak key material and decrypt the challenge payload.

Inspect a memory dump to recover an encoded user session and trace the malicious process chain.

Analyze a seemingly innocent image for embedded payloads and recover the hidden data stream.

Reverse engineer the binary interface and discover how the hidden flag is generated at runtime.

Follow a suspicious packet sequence to reconstruct an exfiltration path between internal hosts and the internet.