Standalone CTF Challenges

An undercover surveillance camera captured a narrow alley shortly before a suspected dark web courier arrived at a dead-drop location. The investigators focused on the people in the frame and overlooked something attached to the wall. Sometimes the smallest details carry the biggest secrets. Not every code is written in text.

During an archaeological excavation, researchers uncovered a notebook claiming to belong to a traveler from the year 2140. Most of the journal is unreadable, but one page contains hundreds of numbers arranged in sequence. According to the author's notes, the numbers aren't random—they represent a message meant to be reconstructed by a simple computer program. The traveler left one final note: Some messages are meant to be automated, not read one digit at a time. Can you recover the hidden message?

A regional bank recently discovered an old ATM diagnostic utility still deployed on several maintenance terminals. Before displaying its internal diagnostics, the program asks technicians to enter a maintenance PIN. The developers were confident the authentication couldn't be bypassed. Security auditors weren't so sure. Can you convince the program you're authenticated without knowing the PIN? The check exists — it just doesn't check enough.

An undercover agent vanished during an operation. The only thing recovered from her phone was a single selfie taken minutes before communication was lost. Nothing in the photo looks suspicious. Her handler insists she always hid emergency messages in the pictures she sent. "A smile can hide more than emotions."

Three weeks ago, a software engineer suddenly stopped showing up for work. The company recovered her work laptop, but it contained nothing useful. During the investigation, HR archived one of her public profile pages before it disappeared. Investigators believe she left behind a clue somewhere in her profile. Can you recover the hidden flag?

During a malware investigation, an incident responder recovered a suspicious executable from a compromised machine. The binary doesn't appear to perform any malicious actions. In fact, running it reveals almost nothing of interest. However, investigators believe its creator left behind a secret hidden somewhere inside the executable itself. Your mission is to inspect the binary and recover the hidden flag. Not everything needs to be executed to be understood.

A AI image-generation model at a research lab produced an image that was never supposed to exist. The picture appears to be nothing more than a peaceful sunset over a server farm. Security investigators found no visible signs of tampering, yet they are convinced the file still contains evidence of its true origin. Your task is to inspect the image carefully and recover the hidden flag.