Challenges are grouped into categories: Network, Linux, Web, Password Attacks, Enumeration, Metasploit, OSINT, Cryptography, Forensics, and General.
Every challenge answer must be submitted in the exact format flag{...}, including the flag{} wrapper.
Flags are case-sensitive. Copy them exactly as you find or derive them; no extra spaces, no missing characters.
Point values reflect difficulty: 50 (very easy), 75 (easy), 100 (slightly harder). Total possible points: 1,325.
You do not need any lab, VM, or external target to solve these challenges. Everything you need is in the challenge description itself. Read carefully.
Rules
Work individually unless your instructor says otherwise.
Avoid using LLMs/AI or web search engines (Google, DuckDuckGo, etc) to solve these challenges.
Do not share flags or solutions with classmates.
Do not attempt to attack, scan, or disrupt this test platform itself. It is not a challenge target.
If a challenge description seems broken or a flag won't accept, ask your instructor rather than guessing repeatedly.
Have fun!
Tips
Read the full challenge message before answering — the format of the expected flag is usually spelled out for you (e.g. flag{command}, flag{port_number}).
If a challenge gives you a command's syntax to recall, think about what each flag or argument does, not just what the output "looks like."
Some challenges include sample output, hashes, or encoded text directly in the description — you can solve those on your own machine with basic tools (terminal, browser, a text editor).