Hacks

#108 Today Every road leads there Digital Forensics & IR Medium ~5 min Write-up #107 Oct 03 +5 XP Instructions in the wiki AI Security Medium ~5 min Write-up #106 Oct 02 +5 XP The field that wins Security Fundamentals Medium ~4 min Write-up #105 Oct 01 +5 XP Write it back Security Fundamentals Easy ~3 min Write-up

#104 Sep 30 +5 XP Approved by somebody else Privilege Escalation & Post-Exploitation Easy ~3 min Write-up #103 Sep 29 +5 XP The trigger that changed everything Cloud Security Medium ~5 min Write-up #102 Sep 28 +5 XP Two victims, one supplier OSINT Medium ~5 min Write-up #101 Sep 27 +5 XP The light that talks Security Fundamentals Very Easy ~2 min Write-up #100 Sep 26 +5 XP One page of six Web & API Security Medium ~4 min Write-up #99 Sep 25 +5 XP Bigger than it says Reverse Engineering & Binary Exploitation Medium ~4 min Write-up #98 Sep 24 +5 XP The fill that was arranged Cryptocurrency & Blockchain Security Hard ~7 min Write-up #97 Sep 23 +5 XP The sender nobody owns Network & Infrastructure Medium ~5 min Write-up #96 Sep 22 +5 XP The invite that made an owner Privilege Escalation & Post-Exploitation Easy ~3 min Write-up #95 Sep 21 +5 XP Who signs your token Cryptography Easy ~3 min Write-up #94 Sep 20 +5 XP The cert that named it Network & Infrastructure Hard ~7 min Write-up #93 Sep 19 +5 XP Where the link really goes Digital Forensics & IR Medium ~4 min Write-up #92 Sep 18 +5 XP The allowlist that isn't AI Security Medium ~5 min Write-up #91 Sep 17 +5 XP Three keys, one account Cloud Security Medium ~5 min Write-up #90 Sep 16 +5 XP The canary build Mobile Security Easy ~3 min Write-up #89 Sep 15 +5 XP The gateway that appeared Network & Infrastructure Medium ~5 min Write-up #88 Sep 14 +5 XP The click you never made Digital Forensics & IR Easy ~3 min Write-up #87 Sep 11 +5 XP Count the layers Security Fundamentals Medium ~4 min Write-up #86 Sep 10 +5 XP The total you do not see Security Fundamentals Medium ~4 min Write-up #85 Sep 09 +5 XP How long does it live Web & API Security Easy ~3 min Write-up #84 Sep 08 +5 XP The alibi that breaks OSINT Medium ~5 min Write-up #83 Sep 07 +5 XP Recover the XOR key Cryptography Hard ~7 min Write-up #82 Sep 06 +5 XP Find the safe one Web & API Security Hard ~7 min Write-up #81 Sep 05 +5 XP Repair the magic bytes Reverse Engineering & Binary Exploitation Medium ~4 min Write-up #80 Sep 04 +5 XP Count the compromised Digital Forensics & IR Hard ~7 min Write-up #79 Sep 03 +5 XP The version that leaks Web & API Security Medium ~4 min Write-up #78 Sep 02 +5 XP When did the backups die Digital Forensics & IR Medium ~4 min Write-up #77 Sep 01 +5 XP Follow the ransom BTC Cryptocurrency & Blockchain Security Medium ~5 min Write-up

#76 Aug 31 +5 XP Single-byte XOR Reverse Engineering & Binary Exploitation Easy ~3 min Write-up #75 Aug 30 +5 XP Who pulled the keys Cryptography Medium ~5 min Write-up #74 Aug 29 +5 XP PEM, not JPG Cryptography Easy ~3 min Write-up #73 Aug 28 +5 XP A token you can read Security Fundamentals Very Easy ~2 min Write-up #72 Aug 27 +5 XP Disabled but shipped Privilege Escalation & Post-Exploitation Easy ~3 min Write-up #71 Aug 26 +5 XP Find the IAM privilege escalation Cloud Security Hard ~7 min Write-up #70 Aug 25 +5 XP Decode the stored credential Privilege Escalation & Post-Exploitation Easy ~3 min Write-up #69 Aug 24 +5 XP Find the leaked AWS key OSINT Medium ~5 min Write-up #68 Aug 23 +5 XP Replay the withdrawal Cryptocurrency & Blockchain Security Medium ~5 min Write-up #67 Aug 22 +5 XP Who got root Privilege Escalation & Post-Exploitation Medium ~5 min Write-up #66 Aug 21 +5 XP Read the system prompt AI Security Medium ~5 min Write-up #65 Aug 20 +5 XP Reverse then ROT Reverse Engineering & Binary Exploitation Easy ~3 min Write-up #64 Aug 19 +5 XP ELF, not data Reverse Engineering & Binary Exploitation Easy ~3 min Write-up #63 Aug 18 +5 XP Forge the group claim Cloud Security Hard ~7 min Write-up #62 Aug 17 +5 XP The webview endpoint Mobile Security Easy ~3 min Write-up #61 Aug 16 +5 XP Find the reentrancy bug Cryptocurrency & Blockchain Security Hard ~7 min Write-up #60 Aug 15 +5 XP Two layers, one flag Cryptography Easy ~3 min Write-up #59 Aug 14 +5 XP SSRF to the internal KV store Network & Infrastructure Hard ~10 min Write-up #58 Aug 13 +5 XP Open the app sandbox Mobile Security Medium ~5 min Write-up #57 Aug 12 +5 XP Find the SQLi probe Web & API Security Medium ~5 min Write-up #56 Aug 11 +5 XP Find the employer Security Fundamentals Very Easy ~2 min Write-up #55 Aug 10 +5 XP Decrypt the ransom note Digital Forensics & IR Medium ~5 min Write-up #54 Aug 09 +5 XP The token names the host Network & Infrastructure Easy ~3 min Write-up #53 Aug 08 +5 XP Find the tool-exec RCE sink AI Security Medium ~5 min Write-up #52 Aug 07 +5 XP PNG, not TXT Digital Forensics & IR Easy ~3 min Write-up #51 Aug 06 +5 XP Find the hidden email OSINT Very Easy ~2 min Write-up #50 Aug 05 +5 XP Decode the beacon label Digital Forensics & IR Easy ~3 min Write-up #49 Aug 04 +5 XP SSRF the cloud metadata Cloud Security Medium ~5 min Write-up #48 Aug 03 +5 XP Loot the instance role Cloud Security Hard ~7 min Write-up #47 Aug 02 +5 XP Same handle everywhere OSINT Easy ~3 min Write-up #46 Aug 01 +5 XP CloudTrail anomaly Cloud Security Hard ~7 min Write-up

#45 Jul 31 +5 XP Vigenere then base64 Cryptography Medium ~5 min Write-up #44 Jul 30 +5 XP Read the JWT claim Mobile Security Easy ~3 min Write-up #43 Jul 29 +5 XP Find the hardcoded API key Mobile Security Medium ~5 min Write-up #42 Jul 28 +5 XP The GPG blob Cryptography Medium ~5 min Write-up #41 Jul 27 +5 XP Hex back to text Security Fundamentals Easy ~3 min Write-up #40 Jul 26 +5 XP The hidden link Security Fundamentals Very Easy ~2 min Write-up #39 Jul 25 +5 XP Flip the debug flag AI Security Easy ~3 min Write-up #38 Jul 24 +5 XP Read the shell history Privilege Escalation & Post-Exploitation Easy ~3 min Write-up #37 Jul 23 +5 XP Geolocate the photo OSINT Easy ~3 min Write-up #36 Jul 22 +5 XP Trace the port scan Network & Infrastructure Medium ~5 min Write-up #35 Jul 21 +5 XP Unwrap the C2 beacon Network & Infrastructure Hard ~7 min Write-up #34 Jul 20 +5 XP Forge the tier AI Security Medium ~5 min Write-up #33 Jul 19 +5 XP Extract the XOR key Reverse Engineering & Binary Exploitation Medium ~5 min Write-up #32 Jul 18 +5 XP The DEX header Mobile Security Medium ~5 min Write-up #31 Jul 17 +5 XP The hidden system prompt AI Security Easy ~3 min Write-up #30 Jul 16 +5 XP Unshift the letters Security Fundamentals Very Easy ~2 min Write-up #29 Jul 15 +5 XP Mass assign yourself admin Privilege Escalation & Post-Exploitation Easy ~3 min Write-up #28 Jul 14 +5 XP Pivot three hops to the vault Network & Infrastructure Hard ~10 min Write-up #27 Jul 13 +5 XP Dox the domain owner OSINT Medium ~5 min Write-up #26 Jul 12 +5 XP Spot the exfil Digital Forensics & IR Easy ~3 min Write-up #25 Jul 11 +5 XP Decode the calldata Cryptocurrency & Blockchain Security Hard ~7 min Write-up #24 Jul 10 +5 XP The none algorithm Web & API Security Medium ~5 min Write-up #23 Jul 09 +5 XP Find the SQL injection sink Web & API Security Easy ~3 min Write-up #22 Jul 08 +5 XP ZIP in disguise Digital Forensics & IR Medium ~5 min Write-up #21 Jul 07 +5 XP The comment leak Web & API Security Easy ~3 min Write-up #20 Jul 06 +5 XP One tap of base64 Reverse Engineering & Binary Exploitation Very Easy ~2 min Write-up #19 Jul 05 +5 XP Pay your own price Web & API Security Easy ~3 min Write-up #18 Jul 04 +5 XP Leak the app admin token Web & API Security Medium ~5 min Write-up #17 Jul 03 +5 XP Check the history Privilege Escalation & Post-Exploitation Easy ~2 min Write-up #16 Jul 02 +5 XP Trace the phish OSINT Easy ~2 min Write-up #15 Jul 01 +5 XP Find the break-in Digital Forensics & IR Easy ~2 min Write-up

#14 Jun 30 +5 XP Two-layer classic Cryptography Easy ~1 min Write-up #13 Jun 29 +5 XP Unwrap the config blob Reverse Engineering & Binary Exploitation Easy ~2 min Write-up #12 Jun 28 +5 XP Tamper the token Web & API Security Easy ~2 min Write-up #11 Jun 27 +5 XP Find the RCE sink Web & API Security Easy ~1 min Write-up #10 Jun 26 +5 XP Pivot to the database Network & Infrastructure Medium ~2 min Write-up #9 Jun 25 +5 XP Find the hidden admin page Security Fundamentals Medium ~2 min Write-up #8 Jun 24 +5 XP Forge the admin role Privilege Escalation & Post-Exploitation Medium ~2 min Write-up #7 Jun 23 +5 XP Reach the internal service Web & API Security Medium ~2 min Write-up #6 Jun 22 +5 XP Crack the reset token Cryptography Medium ~2 min Write-up #5 Jun 21 +5 XP Tamper the invoice ID Web & API Security Easy ~1 min Write-up #4 Jun 20 +5 XP What file is this, really? Digital Forensics & IR Easy ~1 min Write-up #3 Jun 19 +5 XP Peel the encoding Cryptography Very Easy ~1 min Write-up #2 Jun 18 +5 XP Spot the leak in the page Security Fundamentals Easy ~1 min Write-up #1 Jun 17 +5 XP Find the database password Privilege Escalation & Post-Exploitation Easy ~1 min Write-up