CTF series: challenging
In puzzles with few hints and many steps you combine cryptography, forensics, web and privilege misconfigurations.
Level 301 · 16 lessons · 0 practice labs
Lessons
Cryptography
- A file encrypted with single-byte XOR
- A reused keystream
- The weakness of a small RSA key
- A JWT whose signature is not checked
- Short task: write the correct use for the crypto mistake you found
Forensics
- Recovering a deleted file from a disk image
- A command line in a memory dump
- The location in a photo's metadata
- The attacker's first step from the logs
- Short task: merge three pieces of evidence into one timeline
Web and server
- Finding a template injection
- A request that reaches an internal service
- Reading configuration through path traversal
- A program with too many capabilities
- The risk of a user in the docker group
- Capstone: solve a three-machine chain and report the lasting fixes
About this course
In puzzles with few hints and many steps you combine cryptography, forensics, web and privilege misconfigurations.
What you will learn
- Cryptography
- Forensics
- Web and server
Prerequisites
You should be comfortable with the level 101 and 201 topics of the same path.
Lab environment
Lessons run in your own Kali Linux terminal in the browser, connected to a private lab network. Nothing to install.
Frequently asked questions
- Is this course right for my level?
- The course is at level 301; it assumes you know the topics of the lower-level courses.
- Is there anything to install?
- No. Every lesson runs in your own lab environment that opens in the browser.
- How do lessons work?
- Each lesson has 8 to 10 steps and a short quiz. Early steps show the command to type, later steps give less help; if two attempts fail, the solution opens.
- Can I try it for free?
- Yes. The first three lessons of every course are free.