CTF-ORIONsoon
Web instances
Your own copy of a web application to investigate.
Needs tunnelsChallenges
Challenges
File and static challenges. Download the files, work on your own machine and submit the flag when you find it. Outside events there is no clock.
No challenges here yet
New ones are published as teachers finish them. Build one
Coming soon
Machine-based categories need live targets. They open once our tunnel system is ready, so organisers and players can reach isolated boxes safely.
soon
Pwn
Remote services with low-level bugs to study.
Needs tunnelssoon
Boot2Root and King of the hill
Full machines and live head-to-head rounds.
Needs tunnelsDifficulty and points
Every challenge carries one of five levels. Harder challenges are worth more, so the board rewards depth, not just volume.
Beginner100 pts
One idea, clearly signposted. Good after Foundations.
Easy200 pts
A couple of steps and one tool you may not know yet.
Medium300 pts
Needs a plan and some reading around.
Hard400 pts
Several ideas chained together.
Insane500 pts
For people who enjoy losing a weekend.
What a challenge looks like
Each challenge has a short story, one or more files, and a single flag. Flags always follow the same format, so you know when you have found one.
- Format is CTF-ORION{...} and it is case sensitive
- In events, every team receives its own unique flags
- Wrong guesses cost nothing outside events
Forensics, BeginnerExample layout
Plain Sight
A holiday photo was posted with a caption that felt a little too pleased with itself. Look closer.
plain_sight.png412 KB