01 — Recon
easySome things only show up to people who look at what's underneath. View source on the homepage.
// Something Extra
Capture the Flags
Five flags are hidden around this site — some in the obvious places, some not. No writeups, no hints beyond what's below. Find one, drop it in, watch the counter move.
0 / 5 flags captured
02 — Console
easyEvery good analyst checks the logs first. Open your browser's console on the homepage.
03 — Decode
mediumNo hunting needed for this one — just cryptanalysis. The string below is XOR'd against a repeating key: the name of the lab listed under “Current Role" on the homepage.
35090226322b55111e78203a0d713d0c560d223b2a151770793d18
04 — Traffic
mediumNot everything that loads is linked in the page. Watch the network tab while the homepage loads — one small file isn't referenced anywhere you can click, only in what it fetches.
05 — Crawlers 🤖
hardSearch engine crawlers get handed a map of where not to go. That's usually the most interesting place on the map.