CTF ORIONInside your account
Cryptography
Classical ciphers, encodings and modern schemes used in the wrong way.
Challenges
Real capture-the-flag puzzles you solve on your own machine. Download the files, find the flag, submit it. They live inside your account, so your points, streak and progress are saved.
What you can play
New challenges are added to every category all the time, and they open as soon as you create a free account. Outside events there is no clock and wrong guesses cost nothing.
Inside your account
Forensics
Disk images, packet captures and ordinary-looking files that hold more than they show.
Inside your account
Reverse engineering
Small programs to take apart and understand until they give up their secret.
Inside your account
OSINT
Public information, careful searching and connecting the dots, always on fictional targets.
Inside your account
Steganography
Messages hidden inside pictures, sound and documents.
Inside your account
Misc
Logic puzzles, scripting tasks and everything that does not fit a box.
Coming soon
Machine-based categories need live targets. They open once our tunnel system is ready, so organisers and players can reach isolated boxes safely.
soon
Web instances
Your own copy of a web application to investigate.
Needs tunnelssoon
Pwn
Remote services with low-level bugs to study.
Needs tunnelssoon
Boot2Root and King of the hill
Full machines and live head-to-head rounds.
Needs tunnelsDifficulty and points
Every challenge carries one of five levels. Harder challenges are worth more, so the board rewards depth, not just volume.
Beginner100 pts
One idea, clearly signposted. Good after Foundations.
Easy200 pts
A couple of steps and one tool you may not know yet.
Medium300 pts
Needs a plan and some reading around.
Hard400 pts
Several ideas chained together.
Insane500 pts
For people who enjoy losing a weekend.
What a challenge looks like
Each challenge has a short story, one or more files, and a single flag. Flags always follow the same format, so you know when you have found one.
- Format is CTF_ORION{...} and it is case sensitive
- In events, every team receives its own unique flags
- Wrong guesses cost nothing outside events
Forensics, BeginnerExample layout
Plain Sight
A holiday photo was posted with a caption that felt a little too pleased with itself. Look closer.
plain_sight.png412 KB
Learn alone, compete as a team
Practice challenges are for your own learning. Events are where teams compete, and every team gets its own flags.
Practice on your own
Work at your pace, repeat anything, and build a streak. Your points and activity map are yours.
Compete in a team
Join an event with a team of friends. Each team gets its own unique flags and its own place on the board.
Fair for everyone
One account per person, no flag sharing in events. Read the rules