Problem statements
Statements unlock in stages. Anything not yet released stays hidden until the organisers publish it.
Showing 2 of 4 released problems
A packet capture from a compromised workstation contains an exfiltration channel hidden in ordinary-looking traffic. Identify the channel and recover the transferred file.
Submission
Submit the flag and the recovered file hash.
No attachment — full statement above.
A staging application issues session tokens that look random but are not. Recover the signing scheme, forge an administrator session and read the flag from the admin panel. The target is provided as a sandboxed container.
Submission
Submit the flag plus a short write-up describing the weakness and a suggested fix.
No attachment — full statement above.