Cryptography is one of the most important branches in cybersecurity. It is basically transforming plaintexts (original data) into ciphertext (coded data) that can be decrypted and understood by only the intended people.

In this challenge, we found the following cipher code, can you break it and get back the original text? Hint : look for (pigpen cipher)

Deadline: Thursday, 17 Dec. 2020

Statistics

Guess what? A word document (docx)
may contain malicious files and extra information that is hidden.

Can you see the actual content and extract those files? Download the file

Hint : find the message in the POINT file!

Deadline: Wednesday, 10 Feb. 2021

Solution

TheRe_i$_@lway$_an0ther_w@y!

Statistics

The Cybersecurity Team thinks that the following web page needs to be inspected!

Web Page Link

Hint : There are three parts of the POINT!

Deadline: Saturday, 20 Feb. 2021

Solution

tru3_d3t3ct1ve_0r_ju5t_lucky?

Statistics

Can you crack the password of the following zipped file and read its content?

Zipped File

Hint: The cracking may take some time.

Deadline: Sunday, 28 Feb. 2021

Solution

"Well DONE!
You succeeded to break the password.
This is because this password is WEAK!
Make sure to use STRONG passwords "

Statistics

Your mission is to execute the Reverese_Me program and retrieve the POINT. The program asks for a password to peek the POINT.

JAR File

Hint: You will need to debug (reverse) the program to get the password. Once you execute the program, other hints will follow.

Deadline: Wednesday, 10 Mar. 2021

Solution

"ea$y_R3v3rse"

Statistics

Someone hid a secret message in Plain sight in the following image. Can you find all the phrases and break the code?

Image File

Hint: This dots and dashes message was one of the oldest forms of encryption. Look carefully at the image to find the 4 different phrases. The spaces are important.

Deadline: Saturday, 20 Mar. 2021

Solution

"ELEM3NTARYMYD34RW4TS0N"

Statistics

Encryption is a technique used to ensure the secrecy of information in cyberspace. One of the well-known encryption algorithms is RSA. This algorithm is robust but can be implemented in an insecure way. Prove that you can decrypt the following ciphertext (coded) message and get the POINT.

Txt File

Hint: Small prime numbers are used!

Deadline: Tuesday, 30 Mar. 2021

Solution

"cys_challenges{r$a_i$_weak}"

Statistics

Image steganography is one of the most common and essential techniques in the cybersecurity field. It is used to hide secret data within an image without being detected. The secret data is then extracted at the intended destination. On the other hand, Digital Forensics is a technology used to detect hidden data and allow you to extract it.
In this challenge, we hid a secret image within another cover image. Can you (1) Find the marker position of the hidden image and (2) extract the hidden image embedded on the following image (stego)?

Image File

Hint: look for forensics and steganalysis tools that:
For (1), identify the steganized file, detect steganography, and identifies the location of the hidden content.
For (2) reveal hidden images inside another image.

Deadline: Thursday, 07 Oct. 2021

Solution

Statistics

"Open Source Intelligence (OSINT) is a multi-factor methodology for collecting, analyzing and making decisions about data accessible in publicly available sources to be used in an intelligence context." In cybersecurity, OSINT helps discover compromised and breached credentials, publically available business records, individuals or organization's personal and background information, documents, image-focused searches, email, and domain information, inter-connected devices or applications information, exploits archives, and so much more.

In this challenge, we made a tiktok but we need to find the exact time of when it was uploaded. Can you find the date and time of when it was uploaded?

TikTok Link

Hint: You get to view the page source of this tiktok, and look for a certain function. You might get the answer immediately you might not ;)

Important Rules
(1) Your answer should be in KSA time.
(2) Answer should be in 12 hours format not 24 hours (For example : 01:00 pm, not 13:00 ).
(3) Answer format : CYS{yyyy/mm/dd_hh/mm/ss}.

Deadline: Sunday, 21 Nov. 2021

Solution

Statistics

Some websites can hide important and vulnerable information among their files in a hidden directory. Attacker can perform a directory traversal attack to locate these hidden files and steal their information. Can you find the flag using directory traversal in the following link?.

Hint: You can use the python-based brute force tool Dirsearch to find the flag.

Deadline: Monday, 07 Feb. 2022