The targets.
Each discipline is listed with its confirmation status. Machine details and proofs are never published in advance.
- 01Confirmed
Web Application Machines
Explore web applications and APIs hosted on competition machines to identify and exploit security weaknesses.
- 02Confirmed
Reconnaissance & Enumeration
Investigate target machines, discover running services, and gather information to identify potential entry points.
- 03Confirmed
Linux Privilege Escalation
Challenge yourself on Linux machines by identifying weaknesses and working toward higher system privileges.
- 04Confirmed
Windows & Active Directory
Navigate Windows-based machines and domain environments to uncover security weaknesses and achieve challenge objectives.
- 05Confirmed
Reverse Engineering
Analyze binaries, executables, and machine services to understand their behavior and solve technical challenges.
- 06Confirmed
Cryptographic Challenges
Tackle machine-based challenges involving cryptography, encoded information, and secure communication mechanisms.
- 07Confirmed
Post-Exploitation & Forensics
Investigate compromised lab machines, analyze digital artifacts, and uncover information needed to complete objectives.