#root-me

Web client notes for XSS DOM Based - Introduction: XSS variants, CSP bypass narratives, and chaining a UI flaw with an API call the server should have rejected..

Webinsane#web #root-me #insaneMay 26, 2026

Root-Me/CSRF 0 protection·35pts

CSRF 0 protection — Root-Me

Client-side web challenge CSRF 0 protection.

Webinsane#web #root-me #insaneMay 26, 2026

Root-Me/CSP Bypass - Inline code·35pts

CSP Bypass - Inline code — Root-Me

For CSP Bypass - Inline code, the attack surface lives in front-end validation.

Webinsane#web #root-me #insaneMay 26, 2026

Root-Me/AST - Deobfuscation·35pts

AST - Deobfuscation — Root-Me

Client-side web challenge AST - Deobfuscation.

Webinsane#web #root-me #insaneMay 26, 2026

Root-Me/XSS - Stored 1·30pts

XSS - Stored 1 — Root-Me

Web client notes for XSS - Stored 1: XSS variants, CSP bypass narratives, and chaining a UI flaw with an API call the server should have rejected..

Webhard#web #root-me #hardMay 26, 2026

Root-Me/Javascript - Obfuscation 3·30pts

Javascript - Obfuscation 3 — Root-Me

Client-side web challenge Javascript - Obfuscation 3.

Webhard#web #root-me #hardMay 26, 2026

Root-Me/Javascript - Webpack·15pts

Javascript - Webpack — Root-Me

For Javascript - Webpack, the attack surface lives in front-end validation.

Webmedium#web #root-me #mediumMay 26, 2026

Root-Me/Javascript - Obfuscation 1·10pts

Javascript - Obfuscation 1 — Root-Me

For Javascript - Obfuscation 1, the attack surface lives in front-end validation.

Webeasy#web #root-me #easyMay 26, 2026

Root-Me/Javascript - Authentication 2·10pts

Javascript - Authentication 2 — Root-Me

Client-side web challenge Javascript - Authentication 2.

Webeasy#web #root-me #easyMay 26, 2026

Root-Me/Javascript - Source·5pts

Javascript - Source — Root-Me

Client-side web challenge Javascript - Source.

Webeasy#web #root-me #easyMay 26, 2026

Root-Me/Javascript - Authentication·5pts

Javascript - Authentication — Root-Me

Client-side web challenge Javascript - Authentication.

Webeasy#web #root-me #easyMay 26, 2026

Root-Me/HTML - disabled buttons·5pts

HTML - disabled buttons — Root-Me

Client-side web challenge HTML - disabled buttons.

Webeasy#web #root-me #easyMay 26, 2026

Root-Me/PNG - Least Significant Bit·30pts

PNG - Least Significant Bit — Root-Me

Challenge PNG - Least Significant Bit: layered images and subtle LSB patterns.

Forensicshard#root-me #hard #forensicsMay 26, 2026

Root-Me/Crypt-art·25pts

Crypt-art — Root-Me

Challenge Crypt-art: layered images and subtle LSB patterns.

Forensicshard#root-me #hard #forensicsMay 26, 2026

Root-Me/PDF - Embedded·25pts

PDF - Embedded — Root-Me

Stego task PDF - Embedded hiding data in media and metadata.

Forensicshard#root-me #hard #forensicsMay 26, 2026

Root-Me/EXIF - Thumbnail·20pts

EXIF - Thumbnail — Root-Me

Challenge EXIF - Thumbnail: layered images and subtle LSB patterns.

Forensicsmedium#root-me #medium #forensicsMay 26, 2026

Root-Me/WAV - Spectral analysis·20pts

WAV - Spectral analysis — Root-Me

Challenge WAV - Spectral analysis: layered images and subtle LSB patterns.

Forensicsmedium#root-me #medium #forensicsMay 26, 2026

Root-Me/Yellow dots·15pts

Yellow dots — Root-Me

Stego task Yellow dots hiding data in media and metadata.

Forensicsmedium#root-me #medium #forensicsMay 26, 2026

Root-Me/Poem from Space·15pts

Poem from Space — Root-Me

Challenge Poem from Space: layered images and subtle LSB patterns.

Forensicsmedium#root-me #medium #forensicsMay 26, 2026

Root-Me/Twitter Secret Messages·10pts

Twitter Secret Messages — Root-Me

On Twitter Secret Messages, files look innocent at first glance.

Forensicseasy#root-me #easy #forensicsMay 26, 2026

Root-Me/Steganomobile·10pts

Steganomobile — Root-Me

On Steganomobile, files look innocent at first glance.

Forensicseasy#root-me #easy #forensicsMay 26, 2026

Root-Me/Dot and next line·10pts

Dot and next line — Root-Me

Challenge Dot and next line: layered images and subtle LSB patterns.

Forensicseasy#root-me #easy #forensicsMay 26, 2026

Root-Me/EXIF - Metadata·5pts

EXIF - Metadata — Root-Me

On EXIF - Metadata, files look innocent at first glance.

Forensicseasy#root-me #easy #forensicsMay 26, 2026

Root-Me/Root them·35pts

Root them — Root-Me

On Root them, the path crosses web, network, and host layers.

Miscinsane#root-me #misc #insaneMay 26, 2026

Root-Me/Windows - Zerologon·35pts

Windows - Zerologon — Root-Me

Scenario Windows - Zerologon reads like a small enterprise lab.

Miscinsane#root-me #misc #insaneMay 26, 2026

Root-Me/PyRat Auction·30pts

PyRat Auction — Root-Me

On PyRat Auction, the path crosses web, network, and host layers.

Mischard#root-me #misc #hardMay 26, 2026

Root-Me/Breaking Root-Me like it's 2020·30pts

Breaking Root-Me like it's 2020 — Root-Me

Scenario Breaking Root-Me like it's 2020 reads like a small enterprise lab.

Mischard#root-me #misc #hardMay 26, 2026

Root-Me/The h@ckers l4b·25pts

The h@ckers l4b — Root-Me

Realistic scenario The h@ckers l4b blending multiple weak services.

Mischard#root-me #misc #hardMay 26, 2026

Root-Me/Windows - ASRepRoast·25pts

Windows - ASRepRoast — Root-Me

On Windows - ASRepRoast, the path crosses web, network, and host layers.

Mischard#root-me #misc #hardMay 26, 2026

Root-Me/P0wn3d·20pts

P0wn3d — Root-Me

Realistic scenario P0wn3d blending multiple weak services.

Miscmedium#root-me #misc #mediumMay 26, 2026

Root-Me/Windows - Kerberoast·20pts

Windows - Kerberoast — Root-Me

On Windows - Kerberoast, the path crosses web, network, and host layers.

Miscmedium#root-me #misc #mediumMay 26, 2026

Root-Me/End Droid·15pts

End Droid — Root-Me

On End Droid, the path crosses web, network, and host layers.

Miscmedium#root-me #misc #mediumMay 26, 2026

Root-Me/It happens, sometimes·10pts

It happens, sometimes — Root-Me

Realistic scenario It happens, sometimes blending multiple weak services.

Misceasy#root-me #easy #miscMay 26, 2026

Root-Me/Deep Learning - Captcha·40pts

Deep Learning - Captcha — Root-Me

Walkthrough for Deep Learning - Captcha: data structure tradeoffs, boundary cases, and how to derive the expected output without leaking full contest automation code..

Miscinsane#root-me #misc #insaneMay 26, 2026

Root-Me/Apprentice Scraper·35pts

Apprentice Scraper — Root-Me

Programming puzzle Apprentice Scraper focused on algorithmic constraints.

Miscinsane#root-me #misc #insaneMay 26, 2026

Root-Me/Various encodings·30pts

Various encodings — Root-Me

Programming puzzle Various encodings focused on algorithmic constraints.

Mischard#root-me #misc #hardMay 26, 2026

Root-Me/Second degree polynomial solver·25pts

Second degree polynomial solver — Root-Me

Programming puzzle Second degree polynomial solver focused on algorithmic constraints.

Mischard#root-me #misc #hardMay 26, 2026

Root-Me/ELF x64 - Shellcoding - Sheep warmup·25pts

ELF x64 - Shellcoding - Sheep warmup — Root-Me

For ELF x64 - Shellcoding - Sheep warmup, the task tests API misuse and race windows.

Mischard#root-me #misc #hardMay 26, 2026

Root-Me/Deep Learning - Introduction·20pts

Deep Learning - Introduction — Root-Me

Walkthrough for Deep Learning - Introduction: data structure tradeoffs, boundary cases, and how to derive the expected output without leaking full contest automation code..

Miscmedium#root-me #misc #mediumMay 26, 2026

Root-Me/CAPTCHA me if you can·20pts

CAPTCHA me if you can — Root-Me

Programming puzzle CAPTCHA me if you can focused on algorithmic constraints.

Miscmedium#root-me #misc #mediumMay 26, 2026

Root-Me/Mathematic progression·20pts

Mathematic progression — Root-Me

For Mathematic progression, the task tests API misuse and race windows.

Miscmedium#root-me #misc #mediumMay 26, 2026

Root-Me/TCP - Uncompress Me·15pts

TCP - Uncompress Me — Root-Me

Walkthrough for TCP - Uncompress Me: data structure tradeoffs, boundary cases, and how to derive the expected output without leaking full contest automation code..

Miscmedium#root-me #misc #mediumMay 26, 2026

Root-Me/TCP - The Roman wheel·10pts

TCP - The Roman wheel — Root-Me

Programming puzzle TCP - The Roman wheel focused on algorithmic constraints.

Misceasy#root-me #easy #miscMay 26, 2026

Root-Me/TCP - Encoded string·10pts

TCP - Encoded string — Root-Me

Programming puzzle TCP - Encoded string focused on algorithmic constraints.

Misceasy#root-me #easy #miscMay 26, 2026

Root-Me/TCP - Back to school·5pts

TCP - Back to school — Root-Me

Walkthrough for TCP - Back to school: data structure tradeoffs, boundary cases, and how to derive the expected output without leaking full contest automation code..

Misceasy#root-me #easy #miscMay 26, 2026

Root-Me/HTTP - DNS Rebinding·25pts

HTTP - DNS Rebinding — Root-Me

Network challenge HTTP - DNS Rebinding: packet captures and protocol oddities.

Mischard#root-me #misc #hardMay 26, 2026

Root-Me/RF - Key Fixed Code·15pts

RF - Key Fixed Code — Root-Me

Network challenge RF - Key Fixed Code: packet captures and protocol oddities.

Miscmedium#root-me #misc #mediumMay 26, 2026

Root-Me/Data extraction·20pts

Data extraction — Root-Me

For Data extraction, traffic analysis reveals a covert channel.

Miscmedium#root-me #misc #mediumMay 26, 2026

Root-Me/POP - APOP·15pts

POP - APOP — Root-Me

Walkthrough for POP - APOP — routing quirks, protocol state confusion, and turning a man-in-the-middle vantage into actionable host intelligence..

Miscmedium#root-me #misc #mediumMay 26, 2026

Root-Me/RF - FM Transmission·15pts

RF - FM Transmission — Root-Me

Network challenge RF - FM Transmission: packet captures and protocol oddities.

Miscmedium#root-me #misc #mediumMay 26, 2026

Root-Me/SIP - authentication·15pts

SIP - authentication — Root-Me

Network challenge SIP - authentication: packet captures and protocol oddities.

Miscmedium#root-me #misc #mediumMay 26, 2026

Root-Me/LDAP - null bind·15pts

LDAP - null bind — Root-Me

Network challenge LDAP - null bind: packet captures and protocol oddities.

Miscmedium#root-me #misc #mediumMay 26, 2026

Root-Me/NTLM - Authentication·10pts

NTLM - Authentication — Root-Me

Walkthrough for NTLM - Authentication — routing quirks, protocol state confusion, and turning a man-in-the-middle vantage into actionable host intelligence..

Misceasy#root-me #easy #miscMay 26, 2026

Root-Me/Kerberos - Authentication·10pts

Kerberos - Authentication — Root-Me

Walkthrough for Kerberos - Authentication — routing quirks, protocol state confusion, and turning a man-in-the-middle vantage into actionable host intelligence..

Misceasy#root-me #easy #miscMay 26, 2026

Root-Me/DNS - zone transfert·10pts

DNS - zone transfert — Root-Me

For DNS - zone transfert, traffic analysis reveals a covert channel.

Misceasy#root-me #easy #miscMay 26, 2026

Root-Me/CISCO - password·10pts

CISCO - password — Root-Me

Walkthrough for CISCO - password — routing quirks, protocol state confusion, and turning a man-in-the-middle vantage into actionable host intelligence..

Misceasy#root-me #easy #miscMay 26, 2026

Root-Me/ETHERNET - frame·5pts

ETHERNET - frame — Root-Me

For ETHERNET - frame, traffic analysis reveals a covert channel.

Misceasy#root-me #easy #miscMay 26, 2026

Root-Me/TELNET - authentication·5pts

TELNET - authentication — Root-Me

Network challenge TELNET - authentication: packet captures and protocol oddities.

Misceasy#root-me #easy #miscMay 26, 2026

Root-Me/FTP - authentication·5pts

FTP - authentication — Root-Me

Walkthrough for FTP - authentication — routing quirks, protocol state confusion, and turning a man-in-the-middle vantage into actionable host intelligence..

Misceasy#root-me #easy #miscMay 26, 2026

Root-Me/DNS exfiltration·30pts

DNS exfiltration — Root-Me

Forensics scenario DNS exfiltration with disk and memory artifacts.

Forensicshard#root-me #hard #forensicMay 26, 2026

Root-Me/Logs analysis - web attack·25pts

Logs analysis - web attack — Root-Me

On Logs analysis - web attack, investigators recover fragments from an image dump.

Forensicshard#root-me #hard #forensicMay 26, 2026

Root-Me/Heist of the century·25pts

Heist of the century — Root-Me

Forensics scenario Heist of the century with disk and memory artifacts.

Forensicshard#root-me #hard #forensicMay 26, 2026

Root-Me/Find the cat·25pts

Find the cat — Root-Me

Challenge Find the cat: log triage and artifact correlation.

Forensicshard#root-me #hard #forensicMay 26, 2026

Root-Me/Windows - NTDS Secret extraction·20pts

Windows - NTDS Secret extraction — Root-Me

On Windows - NTDS Secret extraction, investigators recover fragments from an image dump.

Forensicsmedium#root-me #medium #forensicMay 26, 2026

Root-Me/Docker layers·20pts

Docker layers — Root-Me

Challenge Docker layers: log triage and artifact correlation.

Forensicsmedium#root-me #medium #forensicMay 26, 2026

Root-Me/ICMP exfiltration·20pts

ICMP exfiltration — Root-Me

On ICMP exfiltration, investigators recover fragments from an image dump.

Forensicsmedium#root-me #medium #forensicMay 26, 2026

Root-Me/Command & Control - level 2·15pts

Command & Control - level 2 — Root-Me

Challenge Command & Control - level 2: log triage and artifact correlation.

Forensicsmedium#root-me #medium #forensicMay 26, 2026

Root-Me/Oh My Grub·15pts

Oh My Grub — Root-Me

On Oh My Grub, investigators recover fragments from an image dump.

Forensicsmedium#root-me #medium #forensicMay 26, 2026

Root-Me/Capture this·15pts

Capture this — Root-Me

On Capture this, investigators recover fragments from an image dump.

Forensicsmedium#root-me #medium #forensicMay 26, 2026

Root-Me/Deleted file·5pts

Deleted file — Root-Me

Challenge Deleted file: log triage and artifact correlation.

Forensicseasy#root-me #easy #forensicMay 26, 2026

Root-Me/Encoding - Codebook·20pts

Encoding - Codebook — Root-Me

Cryptanalysis path for Encoding - Codebook — algebraic manipulation, small subgroup checks, and a plausible attack narrative without dumping complete secret material..

Cryptomedium#crypto #root-me #mediumMay 26, 2026

Root-Me/Circular Bit Shift·20pts

Circular Bit Shift — Root-Me

For Circular Bit Shift, ciphertext structure suggests hybrid encoding.

Cryptomedium#crypto #root-me #mediumMay 26, 2026

Root-Me/Known plaintext - XOR·20pts

Known plaintext - XOR — Root-Me

For Known plaintext - XOR, ciphertext structure suggests hybrid encoding.

Cryptomedium#crypto #root-me #mediumMay 26, 2026

Root-Me/ELF64 - PID encryption·15pts

ELF64 - PID encryption — Root-Me

Crypto challenge ELF64 - PID encryption: classical cipher layers and modular arithmetic.

Cryptomedium#crypto #root-me #mediumMay 26, 2026

Root-Me/File - PKZIP·15pts

File - PKZIP — Root-Me

Crypto challenge File - PKZIP: classical cipher layers and modular arithmetic.

Cryptomedium#crypto #root-me #mediumMay 26, 2026

Root-Me/Pixel Madness·15pts

Pixel Madness — Root-Me

Crypto challenge Pixel Madness: classical cipher layers and modular arithmetic.

Cryptomedium#crypto #root-me #mediumMay 26, 2026

Root-Me/Monoalphabetic substitution - Caesar·15pts

Monoalphabetic substitution - Caesar — Root-Me

Crypto challenge Monoalphabetic substitution - Caesar: classical cipher layers and modular arithmetic.

Cryptomedium#crypto #root-me #mediumMay 26, 2026

Root-Me/CISCO - Salted Password·10pts

CISCO - Salted Password — Root-Me

For CISCO - Salted Password, ciphertext structure suggests hybrid encoding.

Cryptoeasy#crypto #root-me #easyMay 26, 2026

Root-Me/Shift cipher·10pts

Shift cipher — Root-Me

Crypto challenge Shift cipher: classical cipher layers and modular arithmetic.

Cryptoeasy#crypto #root-me #easyMay 26, 2026

Root-Me/Hash - SHA-2·5pts

Hash - SHA-2 — Root-Me

Cryptanalysis path for Hash - SHA-2 — algebraic manipulation, small subgroup checks, and a plausible attack narrative without dumping complete secret material..

Cryptoeasy#crypto #root-me #easyMay 26, 2026

Root-Me/Hash - Message Digest 5·5pts

Hash - Message Digest 5 — Root-Me

Cryptanalysis path for Hash - Message Digest 5 — algebraic manipulation, small subgroup checks, and a plausible attack narrative without dumping complete secret material..

Cryptoeasy#crypto #root-me #easyMay 26, 2026

Root-Me/Encoding - ASCII·5pts

Encoding - ASCII — Root-Me

Crypto challenge Encoding - ASCII: classical cipher layers and modular arithmetic.

Cryptoeasy#crypto #root-me #easyMay 26, 2026

Root-Me/Unity3D Save handling·20pts

Unity3D Save handling — Root-Me

Reverse-oriented cracking task Unity3D Save handling.

Reverse Engineeringmedium#root-me #medium #crackingMay 26, 2026

Root-Me/APK - Flutter Debug·20pts

APK - Flutter Debug — Root-Me

On APK - Flutter Debug, the notes explain tracing a license routine, defeating superficial packers, and extracting the comparison secret without publishing raw keys..

Reverse Engineeringmedium#root-me #medium #crackingMay 26, 2026

Root-Me/ELF ARM - Basic Crackme·20pts

ELF ARM - Basic Crackme — Root-Me

Reverse-oriented cracking task ELF ARM - Basic Crackme.

Reverse Engineeringmedium#root-me #medium #crackingMay 26, 2026

Root-Me/PE DotNet - Basic Crackme·20pts

PE DotNet - Basic Crackme — Root-Me

Challenge PE DotNet - Basic Crackme mixes obfuscation and anti-debug hints.

Reverse Engineeringmedium#root-me #medium #crackingMay 26, 2026

Root-Me/ELF x64 - Basic KeygenMe·20pts

ELF x64 - Basic KeygenMe — Root-Me

On ELF x64 - Basic KeygenMe, the notes explain tracing a license routine, defeating superficial packers, and extracting the comparison secret without publishing raw keys..

Reverse Engineeringmedium#root-me #medium #crackingMay 26, 2026