Browse Scenarios
Explore 200+ hands-on cybersecurity challenges built around real-world scenarios and skills.
Showing 85–96 of 100 scenarios
Tree
A heavily obfuscated JavaScript file implements a multi-stage data transformation pipeline hidden behind control-flow flattening and state-machine execution patterns. At first glance, the code appears noisy and intentionally misleading, with decoy values and dynamic execution paths obscuring the real logic. Your task is to analyze the script, reconstruct the actual execution flow, and understand how the encoded byte array is produced and transformed. The challenge involves stepping through flattened control structures, identifying deterministic transformations, and reversing a sequence of arithmetic, bitwise, and permutation-based operations to recover the original output. Familiarity with JavaScript internals, modular arithmetic, and obfuscation techniques will be essential to make sense of the underlying logic and reach the final result. flag format: flag{}
Tatakae
A stripped .NET Native binary takes user input, transforms it through a custom multi-stage encryption routine, and stores the result in a separate file. With most metadata removed and strings resolved dynamically, traditional .NET reversing techniques will only get you so far. Recover the hidden logic by analyzing native AOT internals, tracking functions against known binaries, and reconstructing the encryption flow to reveal the original message. Familiarity with x64 reversing, ReadyToRun structures, binary diffing, and PRNG behavior will be essential. flag format: flag{******_*********_**_**********}
Specific Ducky
A suspicious USB device triggered an automated PowerShell payload on an employee workstation, but the malware never fully executed. Analyze the captured USB traffic, recover the injected commands, and trace the hidden infrastructure the payload attempted to contact. Flag format: flag{*****************.******.**}
Sasageyo
A .NET Native AOT application was recovered alongside its debug symbols and encrypted output file. At first glance, the binary behaves like a simple utility that processes user input and writes results to disk, but its internal structure has been heavily optimized and stripped in ways that complicate static analysis. Your goal is to reverse the application’s runtime logic, identify how it transforms input data, and recover the original plaintext hidden inside the generated output file. flag format: flag{***_*******_**_*****_****_*****}
QWERTY
A Windows-based information stealer was recovered alongside its debug symbols, revealing heavily obfuscated logic tied to system-specific behavior. The sample collects browser data and prepares it for network transmission, but key runtime values depend on the host environment. Your task is to analyze the binary and understand how it derives its configuration at runtime, then recover the external endpoint it communicates with. flag format: flag{(c2_ip_address)}
Sql Leakage
S C E N A R I O A web application has been compromised through a SQL injection vulnerability, allowing an attacker to exfiltrate sensitive database information. The attack was carried out using automated techniques and left traces in the MySQL server logs. These logs contain evidence of how the attacker extracted administrator credentials using advanced SQL injection methods. Your task is to perform a forensic analysis of these logs to reconstruct the stolen data and understand the attack methodology. O B J E C T I V E Analyze the provided MySQL log files to identify malicious SQL injection activity and reconstruct the exfiltrated administrator credentials. Understand how boolean-based blind SQL injection was used to extract data character by character, then recover the username and crack the extracted password hash to obtain the plaintext password. Provided Files Sql_Leakage.zip Infrastructure Downloadable Disk Image Flag Format FLAG{username|password}
LogChief
SCENARIO A security incident has been detected on one of your organization's web servers. The SOC team has extracted the server logs and needs your expertise to investigate the attack chain. Your mission is to analyze the provided web server logs, identify the attack vectors, and reconstruct the entire attack timeline. When you click "Start Challenge", you'll receive a link to the verification platform. Open this link in your browser to access the interactive question interface. Download the `server.log` file and start analyzing it to find answers to the 10 investigation questions. For each question, enter your answer and click "Check" to get immediate feedback (correct ✅ or incorrect ❌). You can verify answers individually as you find them. Once all 10 answers are correct, the platform will reveal the final flag. Copy this flag and submit it back here on CyberTalents to complete the challenge. flag format : Flag{} Infrastructure - Docker Container — HTTP on port 5000 Provided Files - logchief.zip (3.1 MB)
Burpoo
SCENARIO I've built this super secure vault application! I mean, I'm pretty confident in my skills as a developer. Authentication? Check! I'm using JWT tokens - industry standard, right? Rate limiting? Of course! I've implemented that too. I even added PIN protection for the vaults because, you know, security in layers and all that. I think I'm pretty good at finding workarounds to get things done efficiently, and as you can see, it was so easy for me to implement all these security features. The admin account is locked down tight - good luck getting in there! flag format : Flag{} Infrastructure - Docker Container — HTTP on port 5000 Provided Files - None ( BlackBox Challenge )
Ace
H-hewwo? Hacker-senpai? (｡•̀ᴗ-)✧ We found a super mysterious, super kawaii artifact fwloating in the network! It l-looks like a cute little pet simulator, but... gasp ! Neko-chan is hiding a biiiig secret! She has a flaggy-waggy, but she split it into two pieces and hid them away! >w< She is a very shy kitty: She's Camera Shy! If you try to take a pic of her, she gets scared and turns off the lights! (O_O;) Can you find a way to see her true colors? She speaks in Code! Neko-chan only whispers in secret encwypted meows. Her diary is locked tight! She’s waiting for a worthy master to give her headpats... Can you decrypt her heart and become the Neko Champion? A Very Impawtant Note! Regarding Connection Errors / "Handshake Failed" When you try to play with Neko-chan, she might get grumpy and HISS at you! (Connection Failed / Security Error). THIS IS NOT A BUGGY-WUGGY! PWEASE DO NOT REPORT THE SERVER AS DOWN! Neko-chan is supaa paranoid! She has been programmed to only trust her specific owner. By default, she will reject your connection and refuse to talk to you. Convincing her to accept your connection—even though she wants to block you—is part of the challenge! You have to fix her connection logic yourself! Good luck, Hacker-Senpai! Do your best! Ganbatte! (ﾉ^ω^)ﾉﾟ flag format: flag{}
Expired Pastries
A learning platform hosts several courses with different availability windows. While most content loads normally, one of the more sensitive courses appears unavailable due to its expiration status. The application relies on session data provided by the client to determine what should be accessible, including time-related information used in access decisions. Your goal is to understand how the platform tracks session state and determine whether the expiration logic is enforced securely. flag format: flag{}
found_not_found
S C E N A R I O A web application provides authenticated users with a profile management system that includes avatar upload functionality. Uploaded files are stored inside dynamically generated directories under a publicly accessible uploads path. Initial inspection suggests that file validation is enforced using client-controlled request metadata, while deeper analysis indicates inconsistent enforcement between upload filtering and server-side handling. The backend is based on an Apache web server environment supporting directory-level configuration overrides. Uploaded content is served statically, and additional server behavior may be influenced through configuration-based mechanisms within upload directories. O B J E C T I V E Analyze the file upload functionality and server configuration behavior to identify misconfigurations that allow unauthorized access to restricted server-side resources. Infrastructure Dockerized Apache Web Server Provided Files None Flag Format Flag{...}
www_html_dir
S C E N A R I O A web server hosting a PHP application was compromised. The only recovered artifact is a copy of the /var/www directory. Investigation reveals that the attacker successfully gained remote access and exfiltrated sensitive data. Suspicious files were found inside the uploads/ directory, including a PHP Archive (.phar) file containing heavily obfuscated code. The goal of the investigation is to analyze the malicious payload and determine the attacker’s connection details used for the reverse shell. O B J E C T I V E Analyze the compromised web directory, identify malicious uploaded files, deobfuscate the PHP payload, and extract the attacker’s hostname and port used in the reverse shell connection. Flag Format: Flag{hostname|port} Infrastructure Recovered /var/www Web Server Snapshot Provided Files Compromised web directory (var/www dump) www_html_dir.zip Tools Linux CLI tools (ls, grep, awk, sort), PHP interpreter, text editor Flag Format Flag{}