Examine evidence. Uncover the truth.
Offline edition · Scores stay in this browser. Export your progress before switching devices.
No challenges match these filters.
Live competition ranking rated strictly from highest score to lowest score. Real-time updates automatically synchronized.
| Rank | Team | Solved | Points | Source |
|---|---|---|---|---|
| 🥇 1 | HIVE Alpha | 1 / 80 | 100 pts | |
| 🥈 2 | real team | 1 / 80 | 100 pts | |
| 🥉 3 | TEAM LAMAR | 0 / 80 | 0 pts | |
| #4 | real | 0 / 80 | 0 pts |
Matching local team IDs merge progress. Keep a separate browser profile or computer per competing team.
Normal users are not allowed to upload or import score progress files. Only the Superuser can upload score progress files.
Manage competitions and participant registration. Note: No competition can have more than 60 participants.
Create new CTF competitions (strictly capped at max 60 participants).
Add users to the active competition. Normal users cannot upload score progress; only Superusers can perform admin actions.
Choose the active team on this browser. Every team has separate flags, hints and notes. This is local session management, not user authentication.
Download one evidence ZIP or all 80 packs. Keep the originals and extract working copies. Each README states the question and evidence type. SHA256SUMS.txt verifies the other files in that pack.
Windows: use Get-FileHash -Algorithm SHA256. Linux: use sha256sum -c SHA256SUMS.txt.
A text editor, hex viewer, SQLite viewer and Wireshark cover most exercises. Image/EXIF viewers, an archive utility and Python support recovery and decoding tasks. Use Windows or Linux; Kali is optional. Tools are not bundled.
Windows and memory challenges use clearly labelled simplified exports. They are not native Registry hives, Prefetch files or RAM images. The recovery image is a synthetic unallocated region, not a full disk.
Submit the exact HIVE{value} requested in the question. Flags are case-sensitive; surrounding whitespace is ignored. Each track has 2 Beginner, 2 Intermediate and 6 Advanced challenges. Beginner:100points. Intermediate:250points. Advanced:500points. Each optional hint costs25points. Solves count once.
Record the evidence filename, relevant row or byte offset, timestamps and your reasoning in Investigation notes.
Progress saves in this browser. Export it from Scoreboard before changing computers. Teams are local profiles, not authenticated accounts. Imported scores are self-reported.
This downloadable edition has no live multi-device scoreboard or protected administrator. Flag checks and scores run locally and can be inspected or changed; use it for practice and instructor-led exercises.
Download this HTML and open it directly in Chrome, Edge or Firefox if the preview blocks downloads. No server or internet connection is needed once the file and your analysis tools are available. All identities, records and events are fictional. Midstream PCAPs intentionally omit TCP handshakes. No executable malware is included. Decoded commands should be analysed as text.
For a flagged answer, check spelling, required case, separators and timestamp units. ZIP passwords are part of D38 only. The instructor solution guide is distributed separately.