Browse Scenarios
Explore 200+ hands-on cybersecurity challenges built around real-world scenarios and skills.
Showing 97–100 of 100 scenarios
Tech Insights Blog
S C E N A R I O Welcome to Tech Insights Blog — a platform where users can share their thoughts on technology. While the application appears secure at first glance, its underlying Apache configuration and file handling mechanisms introduce subtle yet powerful vulnerabilities. These misconfigurations, combined with user-controlled input, open the door to advanced exploitation techniques that can lead to full server compromise. O B J E C T I V E Analyze the provided source code and Apache configuration to identify weaknesses in request handling and file resolution. Exploit these flaws to achieve Remote Code Execution by injecting malicious payloads into controlled data and forcing the server to execute unintended files. Ultimately, retrieve the hidden flag stored in a randomly generated directory. Infrastructure PHP Application, SQLite Database Provided Files TechInsightsBlog.zip Tools Web Browser, IDE, Burp Suite Flag Format Flag{}
SuperCheater
S C E N A R I O Welcome to Superheroes High School, where students compete through online exams to climb the leaderboard and earn the Hero’s Prize. However, the system handling submissions and grading contains several critical vulnerabilities. By carefully analyzing how the platform works, it may be possible to exploit weaknesses in both the frontend and backend logic to gain an unfair advantage and rise to the top. O B J E C T I V E Analyze the web application as a black-box target. Identify and exploit vulnerabilities such as stored XSS and insecure API endpoints. Use these weaknesses to gain elevated privileges, manipulate grading functionality, and alter leaderboard rankings to reach the top position and obtain the final reward. Flag Format: Flag{...} User Credentials: SuperCheater:Sup3rCh34t3r#@ Infrastructure Web Application (Student & Teacher Dashboards, REST API) Provided Files None (black-box testing) Flag Format Flag{...}
Still Not Died
S C E N A R I O A network capture has been provided containing encrypted QUIC (HTTP/3) traffic involving a user login and a binary file download. The traffic is protected using TLS, but an accompanying SSL key log file is included, allowing decryption of the session. The goal is to reconstruct the full interaction, extract the downloaded binary output, and recover the session cookie assigned after authentication. The communication uses HTTP/3 over QUIC, which relies on UDP and encrypted multiplexed streams. Proper decryption and stream reconstruction are required to analyze the login flow and file transfer. O B J E C T I V E Analyze the provided PCAP file using Wireshark, decrypt QUIC/HTTP3 traffic using the provided SSLKEYLOGFILE, and extract two key artifacts: the output of the executed binary and the authenticated session cookie. Combine both values to form the final flag. Provided Files still_not_died.zip Infrastructure Downloadable archive Flag Format Flag{decrypted_secret_from_binary|session_value}
Steeeeeeeler
S C E N A R I O Our system was found to be vulnerable to a Cross-Site Scripting (XSS) attack. An attacker exploited this vulnerability to steal a valid JWT session token and gain unauthorized access to the admin panel. Using the compromised session, the attacker performed sensitive operations including account modifications and data exfiltration. Web server access logs were captured during the incident and contain traces of both the legitimate user and the attacker. O B J E C T I V E Analyze the provided web server access logs to identify the attacker’s IP address and the compromised username. Detect session hijacking by identifying JWT token reuse across multiple IP addresses, reconstruct the attack timeline, and decode the stolen token to extract user information. Flag Format: Flag{ip|username} Provided Files Steeeeeeeler.zip Infrastructure Downloadable archive Flag Format Flag{ip|username}