Compete
Capture the Flag
A fresh season every month — themed hunts and general gauntlets. Every flag is recovered by actually doing the work on a real, isolated box you control. Defensive practice only.
November Season: They Always Come Back
An intruder didn't just get in — they made sure they could get back. Three boxes, three footholds hidden where Linux re-runs things on its own: a cron job that phones home, a login hook that re-arms on every shell, and a library force-loaded into every process. Hunt each one down, rip it out without breaking the box, and recover what they left. Defensive eradication only.
October Season: Close the Door
Three boxes, three doors left open on the way out — a passwordless-root sudoers backdoor, a SUID-root shell in the weeds, and an SSH config wide open with a stranger's key in it. Find each foothold, close it without breaking the legitimate access around it, and recover what they left behind. Sandboxes you fully control. Defensive hardening only.
August Season: Cutting the Wire
Three boxes, three severed paths — DNS, firewall rules, and a route that was never supposed to disappear. Someone made sure nothing connected the way it should before they left. Trace each break, repair it properly, and recover what's waiting on the other side. All on sandboxes you fully control. Defensive practice only.
July Season: Ghost in the Machine
Three compromised boxes, three flags buried in the aftermath. Hunt the persistence, read the logs, and recover what the intruder left behind — all on sandboxes you fully control. Defensive practice only.
Season rotation
Coming next: Dec 2026 · Scripting / CLI — being built
All-time standings
loading standings…