Capture the Flag banner with a digital maze leading to a glowing flag

ctf@hack-theory:~$ ./start

Evidence first. Flags second.

Both live challenges run through private Discord interactions. Each launch randomizes evidence, expires after 45 minutes, limits guesses, and signs the final flag to the member and session.

BLUE TEAM

Log Hunt: Password Spray

Analyze condensed authentication telemetry, distinguish normal success from broad low-frequency failures, and identify the suspicious source.

/ctf-start challenge:Log Hunt

WEB DEFENSE

Session Cookie

Review a randomized session-cookie header and identify the missing control that addresses the stated threat.

/ctf-start challenge:Web Defense

Workflow

  1. Run /ctf-start and choose a challenge.
  2. Reason from the evidence. Do not probe any external system.
  3. Submit with /ctf-submit. You have five attempts and 45 minutes.
  4. On success, keep your dynamic HT{...} flag. Another member's flag will not validate as yours.
  5. Use /ctf-stats to view unique solves.
Fair play: discuss methods and detection logic, not exact answers or flags. The point is repeatable reasoning, not secret hoarding.