Capture The Flag
One flag per challenge. Download the artifact, dig in, and submit what you find. Every solve adds to your total points.
Track your solves
Sign in to submit flags, bank points, and see which challenges you have already captured.
Sign inShowing 1–3 of 3
Reverse Engineering
A smart home company abruptly recalled its companion Android app after customers reported "unexpected behavior." The official explanation blamed a firmware issue. Security researchers weren't convinced. Someone managed to save the last APK before it disappeared from the app store. Can you discover what the developers forgot to remove? Hint: Decompiled code still remembers what it used to say.
Reverse Engineering
A regional bank recently discovered an old ATM diagnostic utility still deployed on several maintenance terminals. Before displaying its internal diagnostics, the program asks technicians to enter a maintenance PIN. The developers were confident the authentication couldn't be bypassed. Security auditors weren't so sure. Can you convince the program you're authenticated without knowing the PIN? The check exists — it just doesn't check enough.
Reverse Engineering
During a malware investigation, an incident responder recovered a suspicious executable from a compromised machine. The binary doesn't appear to perform any malicious actions. In fact, running it reveals almost nothing of interest. However, investigators believe its creator left behind a secret hidden somewhere inside the executable itself. Your mission is to inspect the binary and recover the hidden flag. Not everything needs to be executed to be understood.