Browse Scenarios
Explore 200+ hands-on cybersecurity challenges built around real-world scenarios and skills.
Showing 61–72 of 100 scenarios
GitPwned
SCENARIO My friend received an email from a company called AutoSquare Stores. The email provided him with a link to a project on BitBucket and asked if he could work on such a project with them. They asked my friend to do a coding test, such as adding a feature to an existing project. This happened in the start of 2025. My friend downloaded the project and ran it, then some suspected behaviors happened. It seems he has been trapped into some sort of targeting developers' malicious campaign. After a while of searching, I found out my friend was part of a threat actor's campaign. Your tasks: Determine what is the name of the downloader malware used in this operation What is the domain name that the malicious .dll tries to connect to What is the name of the tool the threat actors used for persistence Flag format: flag{MalwareName_www.x.x_softwarename} Infrastructure - Static challenge Provided Files - All needed artifacts can be found online
EasySchema
SCENARIO A simple utility that fetches any URL you throw at it from the server side. Almost any URL, that is. The developer was thoughtful enough to put some rules in place to keep things safe. The flag is sitting at /app/flag.txt . Figure out what the server is running under the hood, understand what it is actually capable of, and find a way past the filter. Flag format: flag{} Infrastructure - Docker Container — HTTP on port 3000 Provided Files - None (BlackBox challenge)
Broken Bonds
SCENARIO Analysts investigating a ransomware incident found a .pptx file left behind on the compromised machine. The slideshow opens fine, the content looks mundane, and nothing immediately stands out. But ransomware operators do not leave files behind by accident. Tear the file apart and find what is hidden inside it. Flag format: flag{} Infrastructure - Downloadable pptx Provided Files - project.pptx (3.1 MB)
49_V1
You've stumbled upon NoteVault, a minimalist note-taking web application built with Python and Flask. The app lets users register, log in, and manage their personal notes,nothing out of the ordinary at first glance. But things aren't always what they seem. Somewhere beneath the surface, the developers made a critical mistake in how they handle user input, one that gives a sharp-eyed attacker far more power than they ever intended. Your goal: exploit this flaw to manipulate the application's database structure, then claim what's waiting for you at /flag . flag format: flag{}
The id
S C E N A R I O A Linux environment is running with three users: play_1, play_2, and ttyduser, all sharing the same password (1234). In the background, a monitoring script (/run.sh) continuously scans system processes for a specific privilege mismatch condition. If a process is detected where the real user is play_1 and the effective user is play_2, the system automatically copies a sensitive file (/root/flag.txt) to /flag.txt. The challenge is to manipulate process credentials in order to trigger this condition and retrieve the flag. O B J E C T I V E Exploit Linux process credential behavior by understanding real user ID and effective user ID differences. Create and execute a binary that runs under a mismatched credential context (RUID vs EUID) so that the monitoring script detects it. Once triggered, retrieve the flag from /flag.txt. Flag Format: Flag{} Infrastructure We Terminal Provided Files Access to system with users play_1, play_2, ttyduser Tools Linux Terminal, GCC Flag Format Flag{}
Steel
S C E N A R I O A wireless surveillance system experienced a suspicious interruption when one of its WiFi cameras suddenly disconnected from the network. During this downtime, sensitive files were stolen. Since some cameras only record while actively connected, an attacker may have deliberately forced the disconnection to disable recording. A captured Wi-Fi traffic file is provided, containing all wireless activity during the incident. O B J E C T I V E Analyze the provided Wi-Fi capture file to identify signs of a deauthentication attack and determine the exact timestamp when the camera was disconnected. Extract the precise time of the attack from the capture data. Flag Format: FLAG{MM-DD-YY-hh-mm} (UTC, 12-hour format) Infrastructure Downloadable Archive Provided Files steel.tar.gz Flag Format FLAG{MM-DD-YY-hh-mm}
Secure Pages
S C E N A R I O A PHP-based web application dynamically includes pages based on a user-controlled query parameter. The navigation system allows users to switch between different sections of the site such as Home, About, Contact, and Dishes. However, the page selection logic directly constructs file paths from user input without proper validation, potentially allowing unintended file access outside the intended directory structure. O B J E C T I V E Analyze the file inclusion logic, identify how user input influences file paths, and determine how directory traversal vulnerabilities can occur and be mitigated using secure PHP configuration practices. Infrastructure PHP Web Application Provided Files Provided via web interface Flag Format Flag{}
Secure escapes
S C E N A R I O A web application provides a feature that allows users to fetch external content from a given URL while optionally supplying custom HTTP headers. The backend processes this request by constructing and executing a curl command on the server. Although input sanitization functions are used, the application still dynamically builds shell commands using user-supplied data, which may introduce security risks if not handled correctly. Careful analysis of how user input is processed and passed into system commands is required to assess the security of the implementation. O B J E C T I V E Analyze the provided PHP source code, identify potential weaknesses in input handling and command construction, and determine whether the application can be influenced in an unsafe way to retrieve the flag. Infrastructure PHP Web Application Provided Files src/ directory (accessible via /challenge/ ) Flag Format Flag{}
FlaGPT
Heart huntin, they claim to be the most dangerous group known to mankind, they recently adopted the AI trend and started training their evil model. They made the silly mistake of generating their profile with their AI and we captured it. Can you go after them and find their evil plans? OBJECTIVE Extract and decode the metadata and embedded certificates from the captured image to uncover the creator's information. Use OSINT techniques to pivot from this data, track down the group's profile, and retrieve the flag. Flag format: FLAG{} Infrastructure: None Provided Files: zip file containing an image
Rojikku
A Python-based encoder generates a digital signal trace from input text using a hardware simulation format. The resulting output represents the data as time-stamped bit-level transitions across multiple signal lines, rather than storing it in a conventional textual form. Your task is to analyze both the generator script and the produced trace file to understand how information is mapped into signal changes over time. The challenge focuses on reconstructing the original data by interpreting structured bitwise transitions and translating them back into meaningful text. flag format: flag{************************************}
My name is Yoshikage Kira
A PowerShell script is provided that appears to be heavily obfuscated and wrapped in multiple layers of compression, encoding, and dynamic execution. At first glance, it resembles harmless text, but execution flow is deliberately concealed through nested transformations and runtime string construction. Your task is to analyze and deobfuscate the script to understand how it reconstructs its final payload. The challenge focuses on unpacking multiple encoding layers, resolving obfuscated PowerShell constructs, and identifying how runtime decryption reveals embedded configuration data such as network endpoints. Flag format: flag{ip:port}
Matryoshka
A multi-layered script-based artifact is provided, originating from a legacy Windows HTML application format. At first glance, the content appears heavily obfuscated and padded with encoded and non-printable characters, hiding its true execution flow across multiple scripting layers. Your task is to analyze and progressively deobfuscate the file to understand how it constructs and executes its final payload. The challenge focuses on tracing nested encoding stages, cleaning structured noise, and following the script’s execution path until the underlying network behavior and infrastructure become clear. flag format: flag{ip_address}