Jeopardy-style CTF competition for young cybersecurity talent, held as part of the I Navarra Cybersecurity Week to foster cyber awareness and digital resilience.
The Navarra Cyber Talent CTF is an official competition showcased within the I Navarra Cybersecurity Week, an initiative organized by the Navarra Cybersecurity Center and celebrated from October 20 to 24 in conjunction with European Cybersecurity Month.
The event aims to promote the culture of cybersecurity across Navarra, raising digital maturity and encouraging societal engagement by bringing together institutions, citizens, businesses, educators, and public administrations.
We have a Ruby encoder. We have passed our flag through the encoder. See if you can figure out what it is.
We have an SSH server that uses the same RSA keys for everything. Password access is disabled and we don’t know if that user will give us bash or not. We also know that the machine has an internal web server that will presumably return the flag.
The flag is stored in a shared SMB directory.
The flag is stored in a shared SMB directory.
The flag is stored in a shared SMB directory. We also know that the hash information will probably not have the entire blob and that the last bytes will be missing.
We have a server that uses SSL to accept connections and give the flag. We know it uses the same RSA keys for everything.
We found an exposed container on the network. Can you demonstrate what you are capable of?
The flag is stored on a network that we can access via SSH. There are several computers on the network, all of which are on the same subnet. All computers have an SSH server and a web page, but only one of them has the flag. It seems that you cannot open a terminal.
The flag will appear when connecting to the server.
The flag is in a file called /flag/flag.txt, which is located on a server that you can access.
The flag will appear when connecting to the server but will be encoded in base64.
The flag is in a file called /flag/flag.txt, which is located on a server that you can access.
The flag is stored on this page with a password system.
We have a program running through a socket. Its input and output have been redirected through the socket so that you can use it as if you were running it on your own machine.
We have a program running through a socket. Its input and output have been redirected through the socket so that you can use it as if you were running it on your own machine.
We have an industrial control board for a traffic tunnel control system managed by an Arduino Uno. The serial port is connected to a socket that we can connect to in order to communicate with it.
We have an industrial control board for a gas station managed by an Arduino Mega. The serial port is connected to a socket that we can connect to in order to communicate with it.
The flag is saved on this page.
This page hides a flag accessible only for certain devices.
This page opens portals to different worlds. One of them hides a flag. Will you be able to find it?
CryptoX uses a token-based authentication scheme to protect its endpoints. Explore the API and find a way to access the restricted area.