wojciech5046

You gave yourself access the system never intended to grant

A credential meant for someone else ends up in your hands

Something was left exposed that shouldn't be public

What is the flag obtained from the debug admin panel accessed through secrets leaked in the exposed git commit history?

While exploring ctf2.playground.ine, you examine the application folder. Which flag is found there?

You've gained access to the host ctf.playground.ine. What is the first flag you discover on that machine?

Secrets often hide in plain sight. Can you decode the message to uncover the truth?

Even the smallest clue can lead to significant findings. Can you determine which file the attacker retrieved from the protected service?

Hidden services sometimes respond to the right sequence of requests. Can you uncover the exact pattern the attacker used to gain access? (Flag Format: XXXX-XXXX-XXXX)

Several shared directories were left exposed without proper restrictions. Can you identify the file the attacker retrieved from one of these unsecured locations?

The flaw is a map, trace it

Uncover the hidden secrets within the binary data lurking in the shadows.

A file reveals a key piece of information. What is this information?

Any attempt to establish persistent access, and if so, what method have been employed? (Type Without Space)

The vulnerable door left open due to admin's negligence in patching it. What's it's name? (Short Name Only)

Do I appear to be a compromised user? (Flag Format - user:date:time) eg: "alice:3/9/2024:8:44:17PM"

Who is relentlessly pursuing access to users (IP Address)?