Misc / Steganography
Music Box v2
A multi-layered puzzle involving hidden hex blobs, XOR encoding, spectrogram analysis, Morse code, corrupted images, and AES decryption. Find the real present among the fake ones.
Steganography
Audio Analysis
AES
XOR
Web / GraphQL
Naughty or Nice
Exploit GraphQL vulnerabilities to access Santa's protected data. Features introspection discovery, authorization bypass, and batch query attacks.
GraphQL
Authorization Bypass
Web Exploitation
Minecraft / Forensics / OSINT
ANormalJourney
A Minecraft world forensics puzzle. Recover the creator's last logout position from NBT data, decode Base64 clues hidden in books, use bedrock pattern matching to locate the final flag stash.
Minecraft
NBT Analysis
Base64
Bedrock Patterns
Signal Processing
Lines of Contact
Decode a deep-space audio transmission hiding raster images. Detect sync pulses in a WAV file, extract scanlines, and reconstruct hidden pictures — Golden Record style.
Audio Analysis
Raster Decoding
Signal Processing
Forensics
Pixel Rehab
A corrupted PNG with a hidden 7z archive appended after the IEND chunk. Fix the signature byte, parse PNG chunks to find the trailer, swap the magic bytes, and extract the real flag.
PNG Forensics
File Carving
7z Archive
Misc
Skyglyph I: Guide Star
A star-tracker calibration puzzle. Use labeled guide stars to fit a camera model with radial distortion, then invert it to map all detections back to sky coordinates. The brightest stars spell a hidden message.
Astrometry
Camera Calibration
Gnomonic Projection
Misc / Crypto / Forensics
Skyglyph II: Blind Drift
Blind plate-solve 4 noisy star frames against a catalog, extract matching star IDs, derive per-frame ChaCha20-Poly1305 keys, and decrypt flag parts. AEAD authentication enforces perfect correctness.
Plate Solving
ChaCha20-Poly1305
RANSAC
SHA256
OSINT
Temptation. Stone. Silence.
Three images, three fragments — each pointing to a Latvian place. Use reverse image search, identify carved faces, and trace devil folklore to pinpoint three locations with proper Latvian diacritics.
Reverse Image Search
Geolocation
Latvian Culture
OSINT / GTA V
Where's Franklin?
A GTA V geolocation challenge. Given a screenshot of Franklin standing next to a road, identify the exact in-game location using database lookups or manual map exploration.
GTA V
Geolocation
GeoGuessr