|
DO THIS FIRST! -> Flag Format
|
OSINT |
1 |
|
|
Self-Signed
|
Crypto |
50 |
|
|
Real or Fake?
|
OSINT |
75 |
|
|
Jeremiah 25:26
|
Crypto |
75 |
|
|
Find the Kids!
|
OSINT |
150 |
|
|
Remove Hex
|
Misc |
100 |
|
|
Extract String
|
Network Analysis |
125 |
|
|
Extract Stego
|
Network Analysis |
200 |
|
|
Unclaimed Property
|
OSINT |
50 |
|
|
Subdomain
|
Misc |
25 |
|
|
Lightswitches
|
Misc |
25 |
|
|
Search before Cracking
|
Crypto |
25 |
|
|
ROT
|
Crypto |
30 |
|
|
Sounds familiar?
|
Crypto |
35 |
|
|
Numbers
|
Crypto |
40 |
|
|
Better than ROT?
|
Crypto |
40 |
|
|
Date Night
|
OSINT |
100 |
|
|
Dan? Dan who?
|
OSINT |
75 |
|
|
Voter Registration
|
OSINT |
150 |
|
|
Facebook #2
|
Web |
100 |
|
|
Favicon
|
Web |
45 |
|
|
Redaction
|
DFIR |
50 |
|
|
Encoding is not Encryption! Base?
|
Crypto |
50 |
|
|
"Security" Question #1
|
OSINT |
50 |
|
|
What's My Account?
|
OSINT |
200 |
|
|
Tesla Chase
|
OSINT |
80 |
|
|
Krebs & Tweets
|
OSINT |
175 |
|
|
EXIF-Store
|
OSINT |
175 |
|
|
Cloud City?
|
Network Analysis |
35 |
|
|
who?
|
OSINT |
50 |
|
|
Just a Word Doc
|
DFIR |
60 |
|
|
You Cannot Find Me...
|
OSINT |
500 |
|
|
EXIF
|
DFIR |
50 |
|
|
Old Page
|
OSINT |
75 |
|
|
robots.txt
|
Web |
50 |
|
|
Do You Hear That?
|
Crypto |
50 |
|
|
Yet Another BaseXX?
|
Crypto |
50 |
|
|
Old Password?
|
Crypto |
50 |
|
|
I tried... can you fix this?
|
Crypto |
60 |
|
|
Prime Primes
|
Crypto |
45 |
|
|
Numbers #2
|
Crypto |
45 |
|
|
Hex Porridge
|
Crypto |
30 |
|
|
Where's the salt?
|
Crypto |
50 |
|
|
Make Your Own Salted Password
|
Crypto |
100 |
|
|
Company #7
|
Current & Past |
15 |
|
|
Company #2
|
Current & Past |
15 |
|
|
Company #4
|
Current & Past |
15 |
|
|
ac.edu
|
Network Analysis |
60 |
|
|
... where am I?
|
OSINT |
80 |
|
|
What's for Lunch?
|
OSINT |
225 |
|
|
Military #1
|
OSINT |
150 |
|
|
Art?
|
Misc |
50 |
|
|
You Know Her... Right?
|
Current & Past |
75 |
|
|
Company #5
|
Current & Past |
15 |
|
|
Commercial
|
Current & Past |
30 |
|
|
Company #1
|
Current & Past |
15 |
|
|
Company #3
|
Current & Past |
15 |
|
|
Company #10
|
Current & Past |
15 |
|
|
Company #11
|
Current & Past |
30 |
|
|
Last Name
|
OSINT |
50 |
|
|
Military #0
|
OSINT |
50 |
|
|
What Country?
|
OSINT |
100 |
|
|
Google Isn't Best
|
OSINT |
80 |
|
|
Published
|
OSINT |
60 |
|
|
Inspect It... again
|
Web |
50 |
|
|
Inspect It
|
Web |
40 |
|
|
Facebook #1
|
Web |
75 |
|
|
Click Around
|
Web |
40 |
|
|
Past Code #1
|
Current & Past |
40 |
|
|
Past Code #2
|
Current & Past |
40 |
|
|
That's Not Mine...
|
DFIR |
75 |
|
|
Find Her
|
OSINT |
400 |
|
|
Cloud Provider
|
Network Analysis |
30 |
|
|
URL vs IPv4
|
Network Analysis |
25 |
|
|
CVE
|
Network Analysis |
75 |
|
|
CVSS
|
Network Analysis |
100 |
|
|
who2?
|
OSINT |
50 |
|
|
OSINT Hunt
|
OSINT |
200 |
|
|
"Security" Question #8
|
OSINT |
200 |
|
|
"Security" Question #2
|
OSINT |
75 |
|
|
"Security" Question #6
|
OSINT |
175 |
|
|
Family Picture
|
OSINT |
100 |
|
|
My Original Mentor
|
OSINT |
350 |
|
|
Who took that pic?
|
OSINT |
375 |
|
|
Home PCAP #1
|
Network Analysis |
50 |
|
|
Hotel Flag
|
OSINT |
150 |
|
|
Gain Physical Access
|
Misc |
75 |
|
|
Third Phone
|
Misc |
60 |
|
|
Baby Boy
|
OSINT |
125 |
|
|
"Collection #1" #1
|
Crypto |
50 |
|
|
Sammy #1
|
DFIR |
75 |
|
|
Sammy #2
|
DFIR |
75 |
|
|
Sammy #3
|
DFIR |
75 |
|
|
Sammy #4
|
DFIR |
75 |
|
|
Sammy #5
|
DFIR |
75 |
|
|
Sammy #6
|
DFIR |
125 |
|
|
Sammy #7
|
DFIR |
125 |
|
|
Sammy #8
|
DFIR |
125 |
|
|
Sammy #9
|
DFIR |
125 |
|
|
File Starter #1
|
Log Analysis |
10 |
|
|
File Starter #2
|
Log Analysis |
15 |
|
|
File Starter #3
|
Log Analysis |
15 |
|
|
File Starter #4
|
Log Analysis |
15 |
|
|
sudo
|
Log Analysis |
50 |
|
|
Who moved that?
|
Log Analysis |
60 |
|
|
Failed Password
|
Log Analysis |
75 |
|
|
Where were you on Nov 1?
|
Log Analysis |
100 |
|
|
What's on Second?
|
Log Analysis |
125 |
|
|
Where were you on Nov 1? #2
|
Log Analysis |
125 |
|
|
I Saw You Enter...
|
Log Analysis |
150 |
|