Welcome to an opportunity to test your hacking skills in breaking client-side encryption that protects a closely guarded secret hidden somewhere on this site. We've created this as a gesture of appreciation for the privacy and security community and our dedicated Podcast listeners, so there will be a small prize for the 3 randomly selected people that manage to capture the flag!
🏆 CHALLENGE WINNERS SELECTED 🏆
Thank you to the incredible community response! We received an overwhelming number of skilled participants who successfully captured the flag. The 3 lucky winners have been randomly selected and notified for their TryHackMe subscriptions.
The challenge remains open for practice – test your skills and see if you can crack the code! While prizes are no longer available, the learning experience continues.
Didn't win this time? Stay tuned! Keep listening to The Lockdown podcast for announcements about future challenges and opportunities. Your next chance to prove your skills is coming!
Quick Start
-
FindLook for clues by viewing source code, navigating pages, and putting your hacking skills to the test.
-
DecryptFound something? Then it'll be time to put cryptographic cracking techniques to the test. If only there was a tool to help with this!
-
SubmitUse the contact form to submit your solution and be eligible for the prize. See the Submission Requirements section below.
-
ClaimTo make it as fair as possible, 3 people who send the correct code via the contact form will be selected at random, providing they meet the criteria (see below). The winners will receive a 6-month subscription gift code for TryHackMe.
Prizes
3 correct submissions will be selected at random (see Submission Rules below):
CHALLENGE CLOSED - Winners have been selected and notified!
Premium access to cybersecurity training!
The technique and correctness matter!
Fair distribution
This challenge is independently organized and funded by PsySecure as a community giveback initiative.
Rules of Engagement
IN SCOPE
- Cryptographic analysis
- Password attacks
- Source code review
- Using our tools or your own
- Content harvesting for wordlists
OUT OF SCOPE
Any infrastructure attacks = Immediate disqualification. This means attacking GitHub, Digital Ocean, Cloudflare, or any other service provider.
- NO server attacks
- NO network or port scanning
- NO denial of service
- NO social engineering
Submission Requirements
Use our contact form with:
- Subject: "CTF Challenge Submission" (in body of message)
- The CTF code you found
- A description of your technique and approach
You must provide these 3 items for a valid submission.