Skip to content

challenges

Directory actions

More options

Directory actions

More options

Latest commit

 

History

History

challenges

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
ai-ml
ai-ml
 
 
blockchain
blockchain
 
 
crypto
crypto
 
 
forensics
forensics
 
 
hardware
hardware
 
 
misc
misc
 
 
mobile
mobile
 
 
osint
osint
 
 
pwn
pwn
 
 
reversing
reversing
 
 
stego
stego
 
 
web
web
 
 
README.md
README.md
 
 

README.md

HackTheBox Challenges - Comprehensive Index

Master index of all HackTheBox challenges organized by category with writeup links, difficulty ratings, and key techniques.

Categories Overview

Category Count Path Key Skills
Web 75+ challenges/web/ XSS, SQLi, SSTI, SSRF, Deserialization, JWT
Crypto 93+ challenges/crypto/ RSA, AES, ECC, Padding Oracle, Custom Ciphers
Forensics 33+ challenges/forensics/ Memory, Disk, Network, Log Analysis
Reversing 44+ challenges/reversing/ x86/x64, ARM, .NET, Java, Obfuscation
Pwn 61+ challenges/pwn/ Stack/Heap, ROP, Format String, Use-After-Free
Mobile 10+ challenges/mobile/ APK Reversing, Frida, Smali, Root Detection
Hardware 11+ challenges/hardware/ UART, SPI, I2C, Firmware, Signal Analysis
OSINT 12+ challenges/osint/ Geolocation, Social Media, Image Metadata
Misc 35+ challenges/misc/ Scripting, Logic, Encoding, Pyjail
Stego 12+ challenges/stego/ LSB, Steghide, Audio, Image Analysis
Blockchain 10+ challenges/blockchain/ Solidity, Smart Contracts, DeFi
AI/ML 5+ challenges/ai-ml/ Adversarial ML, Model Exploitation, Prompt Injection

Web Challenges

# Challenge Difficulty Key Techniques Writeup
1 Trapped Source Very Easy Client-Side Source Analysis 7Rocky
2 Templated Very Easy Jinja2 SSTI 7Rocky
3 Flag Command Very Easy API Exploitation, Command Injection 7Rocky
4 looking glass Easy SSTI, Command Injection 7Rocky
5 Gunship Easy Prototype Pollution, AST Injection 7Rocky
6 Toxic Easy PHP Deserialization, Log Poisoning 7Rocky
7 sanitize Easy NoSQL Injection 7Rocky
8 baby auth Easy Authentication Bypass 7Rocky
9 LoveTok Easy PHP Code Injection 7Rocky
10 TimeKORP Easy PHP Time Injection, Command Injection Medium - Rahul
11 KORP Terminal Easy SQL Injection, Hashcat 7Rocky
12 Neonify Easy Ruby SSTI, Regex Bypass 7Rocky
13 Slippy Easy Python Tar Slip, Path Traversal 7Rocky
14 Full Stack Conf Easy Source Code Analysis 7Rocky
15 CurlAsAService Easy SSRF, curl Exploitation 7Rocky
16 Wild Goose Hunt Easy NoSQL Injection, Regex Extraction 7Rocky
17 E.Tree Easy XPath Injection 7Rocky
18 CandyVault Easy NoSQL Injection (MongoDB) 7Rocky
19 SpookTastic Easy XSS, Bot Exploitation 7Rocky
20 Saturn Easy Path Traversal 7Rocky
21 HTBank Easy Race Condition, Integer Overflow 7Rocky
22 Watersnake Easy Java Deserialization, SnakeYAML 7Rocky
23 Lazy Ballot Easy SQL Injection 7Rocky
24 emoji voting Easy SQL Injection 7Rocky
25 ProxyAsAService Easy SSRF, Proxy Bypass 7Rocky
26 baby interdimensional internet Easy Python Code Injection 7Rocky
27 baby ninja jinja Easy Jinja2 SSTI 7Rocky
28 baby CachedView Easy SSRF 7Rocky
29 baby website rick Easy Source Code Analysis, Cookies 7Rocky
30 baby todo or not todo Easy IDOR, API Abuse 7Rocky
31 Intergalactic Post Easy SQL Injection (SQLite) 7Rocky
32 BlinkerFluids Easy HTML Injection, RCE via PDF 7Rocky
33 Juggling facts Easy PHP Type Juggling 7Rocky
34 Spookifier Easy Jinja2/Mako SSTI 7Rocky
35 Red Island Easy SSRF via Image URL 7Rocky
36 Mutation Lab Easy CSS Injection, Session Forgery 7Rocky
37 Amidst Us Easy Python Pickle Deserialization 7Rocky
38 Diogenes' Rage Easy Race Condition, Coupon Abuse MadDevs
39 Weather App Easy SSRF, SQL Injection s-3ntinel
40 Insomnia Medium Authentication Bypass, Logic Flaw 7Rocky
41 jscalc Medium JavaScript Sandbox Escape 7Rocky
42 OnlyHacks Medium SQL Injection, IDOR 7Rocky
43 Breaking Bank Medium JWT Exploitation, Race Condition 7Rocky
44 wafwaf Medium WAF Bypass, SQL Injection 7Rocky
45 GhostlyTemplates Medium Go Template Injection, SSTI 7Rocky
46 PumpkinSpice Medium SSTI, Python Template Injection 7Rocky
47 Spellbound Servants Medium Deserialization, PHP Object Injection 7Rocky
48 HauntMart Medium SSRF, Internal Service Access 7Rocky
49 0xBOverchunked Medium HTTP Chunked Encoding, SQLi WAF Bypass 7Rocky
50 Percetron Medium ML Model Exploitation 7Rocky
51 Testimonial Medium gRPC Exploitation 7Rocky
52 Horror Feeds Medium SQL Injection, XSS 7Rocky
53 baby nginxatsu Medium Nginx Misconfiguration, LFI 7Rocky
54 Spiky Tamagotchi Medium SQL Injection, Session Hijack 7Rocky
55 Kryptos Support Medium XSS, Cookie Stealing 7Rocky
56 baby breaking grad Medium Prototype Pollution 7Rocky
57 Orbital Medium SQL Injection, LFI 7Rocky
58 Passman Medium GraphQL Exploitation 7Rocky
59 BatchCraft Potions Medium Batch Script Injection 7Rocky
60 baby WAFfles order Medium XXE Injection 7Rocky
61 Cursed Secret Party Medium Stored XSS, CSP Bypass 7Rocky
62 baby BoneChewerCon Medium SSTI, Sandbox Escape 7Rocky
63 RenderQuest Medium Go SSTI, Template Injection Medium - Tanish
64 Labyrinth Linguist Medium Apache Velocity SSTI, CVE-2020-13936 Medium - Rahul
65 CDNio Hard CDN Bypass, Cache Poisoning 7Rocky
66 NeoVault Hard Neo4j Injection, Cypher Injection 7Rocky
67 PDFy Hard PDF Generation SSRF 7Rocky
68 AbuseHumanDB Hard XSS Chain, Bot Exploitation 7Rocky
69 ExpressionalRebel Hard Regex ReDoS, Expression Injection 7Rocky
70 TrapTrack Hard Gopher SSRF, Redis Exploitation 7Rocky
71 Spybug Hard API Key Leak, Stored XSS 7Rocky
72 Didactic Octo Paddles Hard JWT None Algorithm, SSTI 7Rocky
73 The Magic Informer Hard SQL Injection, Prototype Pollution 7Rocky
74 Letter Dispair Hard XSS, SSRF Chain 7Rocky
75 Userland City Hard Complex Multi-Stage Exploitation 7Rocky

Crypto Challenges

# Challenge Difficulty Key Techniques Writeup
1 Ancient Encodings Very Easy Base Encoding, Hex Encoding 7Rocky
2 Weak RSA Very Easy RSA Small Key, Factorization 7Rocky
3 Android-in-the-middle Very Easy Diffie-Hellman MITM 7Rocky
4 sekur julius Easy Caesar Cipher Variant 7Rocky
5 Classic, yet complicated! Easy Classical Cipher, Substitution 7Rocky
6 Jenny From The Block Easy Hash Length Extension, Block Cipher 7Rocky
7 Down the Rabinhole Easy Rabin Cryptosystem 7Rocky
8 How The Columns Have Turned Easy Columnar Transposition 7Rocky
9 Dynastic Easy Custom Cipher, Python Scripting Medium - Rahul
10 The Three-Eyed Oracle Easy AES ECB Oracle Attack 7Rocky
11 Space Pirates Easy Shamir's Secret Sharing 7Rocky
12 One Step Closer Easy RSA Related Message Attack 7Rocky
13 Infinite Descent Easy RSA, Continued Fractions GitHub
14 Brainy's Cipher Easy Custom Cipher Analysis 7Rocky
15 Gonna-Lift-Em-All Easy Diffie-Hellman Key Recovery 7Rocky
16 SPG Easy Secure Password Generator Weakness 7Rocky
17 Symbols Easy Symbol Substitution Cipher 7Rocky
18 I'm gRoot Easy Merkle Tree, Hash Collision 7Rocky
19 Iced Tea Easy TEA Cipher, Block Cipher 7Rocky
20 Perfect Synchronization Easy AES ECB, Frequency Analysis 7Rocky
21 Flippin Bank Medium AES CBC Bit Flipping 7Rocky
22 Initialization Medium AES Initialization Vector Leak 7Rocky
23 MSS Medium Secret Sharing Scheme Attack 7Rocky
24 Mayday Mayday Medium RSA CRT Fault Attack 7Rocky
25 Roulette Medium PRNG Prediction 7Rocky
26 TurboCipher Medium Custom Block Cipher Weakness 7Rocky
27 CryptoConundrum Medium Multi-Stage Decryption 7Rocky
28 BFD56 Medium Blowfish Analysis 7Rocky
29 RLotto Medium PRNG Seed Recovery 7Rocky
30 Zombie Rolled Medium XOR + Custom Cipher 7Rocky
31 Interception Medium MITM Key Exchange 7Rocky
32 Vitrium Stash Medium Custom Encryption Scheme 7Rocky
33 Rookie Mistake Medium RSA Common Factor Attack 7Rocky
34 Partial Tenacity Medium RSA Partial Key Recovery 7Rocky
35 Arranged Medium RSA Lattice Attack 7Rocky
36 Tsayaki Medium AES CTR Nonce Reuse 7Rocky
37 Waiting List Medium Digital Signature Forgery 7Rocky
38 Composition Medium Mathematical Composition 7Rocky
39 Fibopadcci Medium Fibonacci Padding Oracle 7Rocky
40 I know Mag1k Medium Magic Number Exploitation 7Rocky
41 Homomurphy's Law Medium Homomorphic Encryption Weakness 7Rocky
42 signup Medium Signature Forgery 7Rocky
43 Oracle Leaks Medium Padding Oracle Attack 7Rocky
44 Lost Modulus Medium RSA Modulus Recovery 7Rocky
45 Living with Elegance Medium Elliptic Curve Cryptography 7Rocky
46 Blessed Medium RSA Oracle Attack 7Rocky
47 Quadratic Points Medium ECC Quadratic Residue 7Rocky
48 Not that random Medium LCG/PRNG State Recovery 7Rocky
49 Bloom Bloom Medium Bloom Filter Exploitation 7Rocky
50 Protein Cookies 2 Medium Cookie Crypto Attack 7Rocky
51 Secure Signing Medium DSA/ECDSA Nonce Reuse 7Rocky
52 Clutch Medium Lattice-Based Crypto Attack 7Rocky
53 baby quick maffs Medium Simplified Math Attack 7Rocky
54 binary basis Medium Binary Number Theory 7Rocky
55 brevi moduli Medium Short RSA Modulus 7Rocky
56 alphascii clashing Medium ASCII Hash Collision 7Rocky
57 sugar free candies Medium Weak Custom Cipher 7Rocky
58 Hash the Filesystem Medium Filesystem Hash Analysis 7Rocky
59 Find Marher's Secret Medium Mathematical Secret Recovery 7Rocky
60 Lost Modulus Again Hard RSA Advanced Recovery 7Rocky
61 Digital Safety Annex Hard Digital Signature Exploitation 7Rocky
62 Traces Hard Side-Channel Analysis 7Rocky
63 Twin Oracles Hard Dual Oracle Attack 7Rocky
64 Verilicious Hard Verification Bypass 7Rocky
65 Copperbox Hard Coppersmith's Attack (RSA) 7Rocky
66 Mind In The Clouds Hard Cloud Crypto Exploitation 7Rocky
67 secure source Hard Source Code Crypto Analysis 7Rocky
68 read before you sign Hard Signature Scheme Attack 7Rocky
69 hybrid unifier Hard Hybrid Encryption Attack 7Rocky
70 Signing Factory Hard Signature Factory Exploitation 7Rocky
71 Converging Visions Hard ECC Point Convergence 7Rocky
72 Biased Heritage Hard Biased Nonce Attack (HNP) 7Rocky
73 Elliptic Labyrinth Hard ECC Invalid Curve Attack 7Rocky
74 Colliding Heritage Hard Hash Collision Attack 7Rocky
75 Inside The Matrix Hard Matrix-Based Crypto 7Rocky
76 Multipage Recyclings Hard AES Key Schedule Attack 7Rocky
77 TwoForOne Hard Signature Forgery 7Rocky
78 LunaCrypt Hard Custom Crypto Analysis 7Rocky
79 400curves Hard ECC Multi-Curve Analysis 7Rocky
80 RsaCtfTool Hard RSA Multi-Attack Automation 7Rocky
81 Nuclear Sale Hard Nuclear-Themed Crypto 7Rocky
82 Optimus Prime Hard Large Prime Exploitation 7Rocky
83 AbraCryptabra Hard Multi-Layer Decryption 7Rocky
84 quick maffs Hard Fast Math Crypto Attack 7Rocky
85 Ebola Virus Hard Virus-Themed Crypto 7Rocky
86 ElElGamal Hard ElGamal Signature Attack 7Rocky
87 Infinite Knapsack Hard Knapsack Problem Attack 7Rocky
88 AESWCM Hard AES Weak Counter Mode 7Rocky
89 Bank-er-smith Hard Banking Crypto Flaw 7Rocky
90 AHS512 Hard Custom Hash Function 7Rocky
91 Spooky RSA Hard Multi-Prime RSA 7Rocky
92 Fast Carmichael Hard Carmichael Number Exploitation 7Rocky
93 BBGun06 Hard BB84 Quantum Crypto 7Rocky

Forensics Challenges

# Challenge Difficulty Key Techniques Writeup
1 Illumination Very Easy Git History Analysis, Token Recovery Medium - Nouf
2 An unusual sighting Very Easy SSH/Bash Log Analysis Medium - Rahul
3 Urgent Very Easy Phishing Email Analysis 7Rocky
4 Alien Cradle Very Easy PowerShell Script Analysis 7Rocky
5 Extraterrestrial Persistence Very Easy Cron Job / Persistence Analysis 7Rocky
6 Wrong Spooky Season Easy PCAP Analysis, Reverse Shell Detection 7Rocky
7 Halloween Invitation Easy Macro Analysis, VBA Malware 7Rocky
8 POOF Easy Log Analysis, Incident Timeline 7Rocky
9 Downgrade Easy Windows Event Log Analysis 7Rocky
10 Fake News Easy Web Forensics, Source Analysis 7Rocky
11 Lure Easy Malicious Document Analysis 7Rocky
12 Chase Easy PCAP Analysis, Wireshark Medium - Josh
13 Phreaky Easy PCAP Analysis, Data Extraction Medium - Rahul
14 Export Easy Memory Forensics (.raw), Volatility Medium - Josh
15 Insider Easy Linux Filesystem Forensics 7Rocky
16 Free Services Easy Malicious Email Analysis 7Rocky
17 Packet Cyclone Easy PCAP + Sigma Rules 7Rocky
18 Automation Easy PowerShell Script Analysis 7Rocky
19 Keep Tryin' Easy Email Forensics, MIME Analysis 7Rocky
20 Perseverance Easy WMI Persistence Detection HTB Blog
21 Reminiscent Easy Memory Forensics, Volatility DFIR Blog
22 MarketDump Medium Network Forensics, Data Leak 7Rocky
23 Relic Maps Medium Malicious Macro, HTA Analysis 7Rocky
24 Event Horizon Medium Windows .evtx Analysis Medium - SecurityNoodle
25 No Place To Hide Medium Network Traffic Analysis 7Rocky
26 Logger Medium Keylogger Forensics 7Rocky
27 Peel Back The Layers Medium Docker Image Forensics 7Rocky
28 Deadly Arthropod Medium C2 Traffic Analysis 7Rocky
29 Artifact Of Dangerous Sighting Medium Windows Artifact Analysis 7Rocky
30 Valhalloween Hard Complex Incident Forensics 7Rocky
31 Interstellar C2 Hard C2 Communication Decryption 7Rocky
32 Scripts and Formulas Hard Excel Macro Forensics 7Rocky
33 Red Miners Hard Cryptominer Forensics 7Rocky

Reversing Challenges

# Challenge Difficulty Key Techniques Writeup
1 Baby RE Very Easy Basic x64 Disassembly 7Rocky
2 WIDE Very Easy Wide String Analysis 7Rocky
3 Find The Easy Pass Very Easy .NET Decompilation SecJuice
4 Impossible Password Very Easy String Comparison Bypass 7Rocky
5 Shattered Tablet Very Easy Basic Static Analysis 7Rocky
6 LootStash Very Easy Basic String Analysis Medium - Rahul
7 Rebuilding Easy Binary Reconstruction 7Rocky
8 Teleport Easy Binary Protocol Analysis 7Rocky
9 Snakecode Easy Python Bytecode Analysis 7Rocky
10 You Cant C Me Easy C Binary Obfuscation 7Rocky
11 Baby Crypt Easy Basic Crypto Reversing 7Rocky
12 Hunting License Easy License Key Reversing 7Rocky
13 Ouija Easy Ouija-Themed Binary 7Rocky
14 Secured Transfer Easy Protocol Reverse Engineering 7Rocky
15 Ransom Easy Ransomware Key Recovery 7Rocky
16 Anti Flag Easy Anti-Debug Bypass 7Rocky
17 Potion Master Easy Game Logic Reversing 7Rocky
18 Curse Breaker Easy Encryption Algorithm Reversing 7Rocky
19 SpellBrewery Easy String Array Decoding 7Rocky
20 Bypass Easy .NET Auth Bypass (dnSpy) Medium
21 Exatlon Easy UPX Packed Binary Medium - bigkahuna
22 Spooky License Easy Angr Symbolic Execution Medium - 0x00
23 Up a Stream Easy Data Stream Analysis 7Rocky
24 RiseFromTheDead Easy Zombie-Themed Reversing 7Rocky
25 Snake Easy Python Game Reversing Medium - Tarun
26 Hissss Medium Python Compiled Binary (.pyc) 7Rocky
27 Headache Medium Anti-Analysis Techniques 7Rocky
28 The Vault Medium Multi-Layer Protection 7Rocky
29 IRCware Medium IRC Bot Reversing 7Rocky
30 Eat the Cake! Medium Obfuscated Binary 7Rocky
31 Alien Saboteaur Medium Custom VM Bytecode 7Rocky
32 ChromeMiner Medium Browser Extension Reversing 7Rocky
33 Sekure Decrypt Medium Decryption Routine Analysis 7Rocky
34 RetoRetro Medium Retro Binary Analysis Medium - f0xtty
35 Encryption Bot Medium Bot Logic Reversing 7Rocky
36 Tear or Dear Medium Conditional Logic Reversing 7Rocky
37 FlagCasino Medium PRNG Seed Recovery 7Rocky
38 Golfer - Part 1 Medium Code Golf Reversing 7Rocky
39 SpookyPass Hard Password Verification Bypass 7Rocky
40 Graverobber Hard Complex Binary Exploitation 7Rocky
41 CryptOfTheUndead Hard Encryption Algorithm Reversing 7Rocky
42 Hubbub Hard Complex Obfuscation 7Rocky
43 BinCrypt Breaker Hard Custom Crypto Binary 7Rocky
44 ReRop Hard ROP Chain Analysis 7Rocky

Pwn Challenges

Full list of 61 pwn challenges: see pwn/README.md or browse 7Rocky Pwn Index.

# Challenge Difficulty Key Techniques Writeup
1 Getting Started Very Easy Stack Buffer Overflow Basics Medium - Rahul
2 Questionnaire Very Easy Binary Security Quiz 7Rocky
3 Space pirate: Entrypoint Very Easy Buffer Overflow, Basic ROP 7Rocky
4 Space pirate: Going Deeper Very Easy Stack Overflow, ROP 7Rocky
5 Vault-breaker Very Easy Basic Binary Exploitation 7Rocky
6 Reg Easy Buffer Overflow, ret2win Blackfell
7 Jeeves Easy Format String, ret2win JayBailey
8 Void Easy ret2libc, Stack Pivot Medium - Rahul
9 Ropme Easy Return-Oriented Programming Medium - Gabriel
10 Labyrinth Easy Stack Overflow, Maze Logic Medium - Rahul
11-22 Fleet Management, Blacksmith, HTB Console, Entity, Leet Test, Format, Bat Computer, Space pirate: Retribution, No Return, Spooky Time, Shooting star, Great Old Talisman Easy Various Stack/Format Exploits 7Rocky
23-41 Hellhound, Old Bridge, Trick or Deal, Space, Spellbook, Sacred Scrolls: Revenge, Optimistic, PwnShop, CRSid, Finale, Nightmare, Math Door, Control Room, FileStorage, Auth-or-out, echoland, Robot Factory, Bon-nie-appetit, knote Medium Heap/Format String/Advanced 7Rocky
42-60 Zombiedote, Zombienator, Antidote, Dragon Army, Sound of Silence, Maze of Mist, Kernel Adventures: Part 1, Lesson, Nowhere to go, Oxidized ROP, Pixel Audio, Hunting, Regularity, Picture Magic, Sick ROP, Dead or Alive, Fake Snake, Ancient Interface Hard Heap/Kernel/Advanced ROP 7Rocky
61 Dream Diary: Chapter 3 Insane tcache Poisoning, Heap Feng Shui 7Rocky

Mobile Challenges

# Challenge Difficulty Key Techniques Writeup
1 APKey Very Easy APK Analysis, Smali Code, JADX Medium - 0xk3r0
2 APKrypt Easy APK Decompilation, Key Recovery CSbyGB GitBook
3 Don't Overreact Easy React Native Reversing, Hardcoded Secrets CSbyGB GitBook
4 Cat Easy Android Backup (.ab) Analysis Medium - Danish
5 SeeTheSharpFlag Easy Xamarin/.NET Mobile Reversing CSbyGB GitBook
6 SAW Easy Android Smali Patching Hackplayers
7 Pinned Medium Certificate Pinning Bypass, Frida CSbyGB GitBook
8 Manager Medium Android Password Manager Vuln Medium - xProtagonist
9 Anchored Medium Android App Anchoring Bypass CSbyGB GitBook
10 Cryptohorrific Medium Mobile Crypto Exploitation Medium - Sanket

Hardware Challenges

# Challenge Difficulty Key Techniques Writeup
1 Photon Lockdown Very Easy Firmware Extraction, Binwalk 7Rocky
2 HM74 Very Easy Hamming Error-Correcting Codes 7Rocky
3 Gawk Easy Logic Analyzer, SPI Protocol 7Rocky
4 Unique Easy UART Communication Analysis 7Rocky
5 Walkie Hackie Easy Radio Frequency Analysis 7Rocky
6 Secure Digital Easy SD Card / SPI Protocol Decode 7Rocky
7 Mini Line Medium Line Protocol Analysis 7Rocky
8 VHDLock Medium VHDL Hardware Description Analysis 7Rocky
9 Debugging Interface Easy UART Debugging, Serial Comms Medium - Justus
10 Debug Easy Hardware Debug Interface Medium - Rahul
11 The Needle Easy Linux Firmware Analysis Motasem Notes

OSINT Challenges

# Challenge Difficulty Key Techniques Writeup
1 Easy Phish Very Easy DNS, SPF/DMARC Records 7Rocky
2 Infiltration Easy LinkedIn, Instagram Recon 7Rocky
3 Missing in Action Easy LinkedIn, Twitter, Google Dorks 7Rocky
4 Money Flowz Medium Reddit, Ropsten Ethereum Chain 7Rocky
5 Monstrosity Medium Twitter API, Geolocation 7Rocky
6 Various Easy OSINT Easy Multi-Source OSINT Medium - Vinayak
7 Various Medium OSINT Medium Advanced OSINT Techniques Medium - Vinayak
8-14 Cyber Apocalypse 2025 OSINT (7 challenges) Various Geolocation, Social Media, Public Records Medium - Carson

Misc Challenges

# Challenge Difficulty Key Techniques Writeup
1 Emdee five for life Very Easy MD5 Hashing, Python Scripting 7Rocky
2 The secret of a Queen Very Easy Mary Queen of Scots Cipher 7Rocky
3 Compressor Easy Compression/Archive Analysis 7Rocky
4 0ld is g0ld Easy PDF Password Cracking 7Rocky
5 fs0ciety Easy Mr. Robot Themed, File Analysis 7Rocky
6 Da Vinci Easy Steganography + Logic 7Rocky
7 Hackerman Easy Strings, Basic Steg 7Rocky
8 BitsNBytes Easy Binary Analysis, Image Comparison 7Rocky
9 Art Easy ASCII Art Analysis 7Rocky
10 Milkshake Easy Data Transformation 7Rocky
11 M0rsarchive Easy Morse Code, Nested Archives 7Rocky
12 Pusheen Loves Graphs Easy Graph Analysis 7Rocky
13 misDIRection Easy Directory Structure Analysis Medium - Nouf
14 Chainsmoker Easy Chain Analysis 7Rocky
15 Hidden Path Easy Node.js Source Code Analysis MadDevs
16 Eternal Loop Medium Infinite Loop/Archive Puzzle 7Rocky
17 ExploitedStream Medium Stream Exploitation 7Rocky
18 Tree of Danger Medium Tree Structure Analysis 7Rocky
19 Path of Survival Medium Pathfinding Algorithm 7Rocky
20 Pickle Panic Medium Python Pickle Deserialization 7Rocky
21 Query Medium Database Query Analysis 7Rocky
22 Type Exception Medium Type System Exploitation 7Rocky
23 Canvas Medium Canvas Drawing Analysis 7Rocky
24 Fentastic Moves Medium Chess/Game Logic 7Rocky
25 Locked Away Medium Lock Picking Logic 7Rocky
26 Branching Tactics Medium Git Branch Analysis 7Rocky
27 A Nightmare On Math Street Medium Math-Based Scripting 7Rocky
28 SecretRezipe Hard Recipe-Themed Complex Logic 7Rocky
29 Computational Recruiting Hard Algorithm Challenge 7Rocky
30 Man In The Middle Hard MITM Network Analysis 7Rocky
31 Replacement Hard Data Replacement Logic 7Rocky
32 Deterministic Hard Deterministic Computation 7Rocky
33 Triangles Hard Geometric Math Challenge 7Rocky
34 Bashic Calculator Hard Bash Scripting Exploitation 7Rocky
35 Quantum Artifact Hard Quantum-Themed Challenge 7Rocky

Steganography Challenges

# Challenge Difficulty Key Techniques Writeup
1 Forest Easy Image Steg, Steghide, Brightness z00mik GitHub
2 Digital Cube Easy Image Analysis, Pixel Manipulation z00mik GitHub
3 Retro Easy Retro Image Steg z00mik GitHub
4 Pusheen Loves Graphs Easy Graph-Based Steganography z00mik GitHub
5 Hackerman Easy Steghide, rockyou Wordlist Art0fHack
6 Widescreen Easy Steg Solver Hackplayers
7 Image Processing 101 Easy Basic Image Processing HTB Forum
8 Unprintable Medium Non-Printable Characters z00mik GitHub
9 Not Art Medium Art-Based Steganography z00mik GitHub
10 BitsNBytes Medium Image Comparison, ImageMagick HTB Forum
11 Massacre Hard Complex Multi-Layer Steg z00mik GitHub
12 Senseless Behaviour Hard Behavioral Analysis Steg z00mik GitHub

Blockchain Challenges

# Challenge Difficulty Key Techniques Writeup
1 Survival of the Fittest Very Easy Smart Contract Interaction, cast InfoSec Writeups
2 Russian Roulette Very Easy Block Hash Manipulation Forbytten
3 Lucky Faucet Easy Integer Overflow, Solidity 7Rocky
4 Funds Secured Easy Incorrect Parameter Verification 7Rocky
5 Magic Vault Easy Private Storage Read, Block Mechanics Medium - 0x-professor
6 Distract and Destroy Easy Smart Contract Logic Exploit GitHub - KanakSasak
7 Confidentiality Medium ERC-721, ECDSA Signature Malleability 7Rocky
8 Honor Among Thieves Medium Multi-Contract Exploitation GitHub - KanakSasak
9 Art of Deception Medium Smart Contract Deception Medium - Nikhil
10 University CTF 2024 Blockchain Various Multiple Smart Contract Challenges Medium - Nafiz

AI/ML Challenges

# Challenge Difficulty Key Techniques Writeup
1 Sigma Technology Easy Adversarial Machine Learning 7Rocky
2 AI Space Easy Multidimensional Scaling, Data Analysis 1337Sheets
3 Prometheon Medium Multi-Stage Prompt Injection, LLM Bypass Medium - Paragbhosale
4 External Affairs Medium AI Travel Screening Bypass, Prompt Injection hack-lab-256
5 FullHouse (Lab) Medium AI Bypass and Exploitation HTB Blog

Key Writeup Collections

Source URL Coverage
7Rocky 7rocky.github.io 350+ challenges across all categories
Hackplayers GitHub Web, Crypto, Forensics, Mobile, Stego, OSINT
Rishitsaiya GitHub Crypto, Web, OSINT, Forensics, Reversing
z00mik GitHub 8 Stego challenges
KanakSasak GitHub Blockchain challenges
CSbyGB GitBook Mobile/Android challenges
Esther7171 GitHub Multi-category writeups
0xRick Blog Multi-category writeups
zweilosec GitBook Machines and Challenges

Difficulty Distribution

  • Very Easy - Great for absolute beginners, teaches fundamentals
  • Easy - Requires basic understanding of the category
  • Medium - Solid understanding and creative thinking needed
  • Hard - Competition-level challenges with complex attack chains
  • Insane - Expert-level, often requiring novel techniques