Recently

Here is a new series of mobile oriented forensic challenges.

You will be able to investigate many artifacts present in Android and iOS systems. Three challenges are available: an introduction to the investigation of an iPhone, the exploration of the RAM of an Android, as well as a complete investigation of these two types of phones.

• iOS - Introduction
• Find me on Android
• The Lost Case - Investigation Mobile

Thanks to Worty and Itarow for these new challenges !

Here is a new series of client and server web challenges.
In this series, you will learn about sometimes little-known vulnerabilites, namely an introduction to Web Socket security, a first challenge about Prototype Pollution in NodeJS and an advanced PHP object deserialization.

• Web Socket - 0 protection
• NodeJS - Prototype Pollution Bypass
• PHP - Unserialize Pop Chain

Thank you Worty for those new challenges!

Here is a new series of client web challenges on XSS DOM Based vulnerabilities.

• XSS DOM Based - Introduction
• XSS DOM Based - Filters Bypass
• XSS DOM Based - Eval
• XSS DOM Based - AngularJS

Thanks to Ruulian for these challenges!

Here is a series of challenges to discover new types of hashes that you will generally encounter during pentests on Windows infrastructure. You will learn to recognize them in the outputs of the tools from the Impacket suite.

• Hash - NT
• Hash - LM
• Hash - DCC
• Hash - DCC2
• CISCO - Salted Password

Thanks to Shutdown, Tidusrose and Podalirius for these challenges!

New mitigations make memory corruption exploitation increasingly harder. Therefore, Hackers must prove again their ingenuity against them in order to bypass these protections, and obtain a shell.
Sharpen your app-system skills with this new series of challenges!

• ELF x64 - ret2dl_init
• ELF x64 - FILE structure hijacking
• ELF x64 - File Structure Hacking
• ELF x64 - Heap Filling
• ELF x64 - Advanced Heap Exploitation - Heap Leakless & Fortified

Big thanks to kikko, voydstack and nobodyisnobody for the development of these new challenges!

We are pleased to announce the 5th edition of the Toulouse Hacking Convention !

Event will take place online, from June 11 to 13 2021.

We organized two different parts :

• On June 11th, at 9 am : conferences and panels,
• from June 12th to 13th : a Jeopardy style CTF with prizes to win !

Get your free tickets here : https://thcon.party !

You can also contribute financially to our event, and get fancy THCon t-shirts and masks.

Follow us on Twitter for the latest news : https://twitter.com/ToulouseHacking

• Dates: June 11 to 13, 2021
• Format: conferences then CTF (Jeopardy)
• Site: https://thcon.party

See you soon !

Once again this year, the National Information Systems Security Agency (ANSSI) is back with the France Cybersecurity Challenge (FCSC) from April 23 at 3 p.m. to May 3 at 6 p.m.!

100% ANSSI Challenge, the individual CTF allows all players to test their skills in a wide variety of challenges, and perhaps join the national team that will represent France during the 2021 edition of the European Cybersecurity Challenge (ECSC), in Prague.

At the end of the competition, the best players (top 10 junior, top 10 senior and top 3 in Crypto, Reverse, Pwn, Web and Hardware) will be interviewed by our coaches in order to select Team France, which will defend its colors from September 28 to October 1, 2021 at the ECSC.

To try your luck and keep up to date with the latest information, join the FCSC discord server.

More information on the ANSSI website.

More and more NodeJS environments are emerging, but security is often overlooked. In this series, you will discover recent and realistic vulnerabilities in these environments.

• Node JS vm escape
• Nodeful
• Texode Back

Many thanks to Mhd_Root, voydstack and Podalirius for creating this set of challenges!

The HeroCTF (3rd edition) is an online cybersecurity competition open to all, organized by students from IUT de Vannes and ESNA.
This CTF is aimed at beginner to intermediate players, but whatever your level you will certainly find something to please you!

There will be something for everyone with categories like: Blockchain, Cryptography, Forensics, Misc, OSINT, Programming, Pwn, Reverse, Steganography, System and Web.

You can now register your teams of 4 players at https://heroctf.fr/ and aim for the top to try to win prizes!

Start : Friday 23 april - 9 p.m
End : Sunday 25 april - 11 p.m

More information on the Twitter and the Discord of the event.

Time travel doesn’t scare you?
Are you a student and want to participate in a beginner / intermediate level CTF?
So do not wait any longer! Prepare your crew of 4 and fasten your seatbelts!
A ticket is waiting for you at this address: https://midnightflag.fr/

Whoami? A group of students from ESNA from Bretagne passionate about infosec.
Pwd? Somewhere in space time.
Date? the night of Saturday April 10 from 8:30 p.m. to 6 a.m.
Locate? Online

More information on the Twitter and on the Discord of the event!