Tiny board.
Real lessons.

Capture all 6 flags. Everything you need is inside this isolated network.

OPEN

1. Traversal Trap

Audit a file API that joins trusted and untrusted paths.

Investigate
OPEN

2. Checksum Crown

Determine whether a token has cryptographic integrity.

Investigate
OPEN

3. Short PIN Audit

Evaluate a fast hash protecting a tiny keyspace.

Investigate
OPEN

4. Protocol Chain

Chain method discovery, client analysis, headers, and decoding.

Investigate
OPEN

5. Predictable Recovery

Predict a security token generated by a deterministic public sequence.

Investigate
OPEN

6. Signed Sidecar

Determine whether a valid MAC covers every security-sensitive field.

Investigate

Submit a flag

Progress: 0 / 6