Capture The Flag.
Prove Your Cyber Skills.
Tackle realistic cloud-hosted targets and digital forensics investigations right in your browser. Solve the first 2 challenges instantly without creating an account.
Free Play Challenges · No Login Required
Open the live target environment in your browser, search for the hidden vulnerability or artifact, and enter the flag below.
ERNITH{...}Operation Digital Evidence
Analyze a simulated digital evidence investigation to identify relevant evidence sources, understand their significance, and determine how digital artifacts can support evidence-based security findings.
Operation Blind Spot
Investigate a simulated SOC scenario to identify security events that may have been overlooked, analyze available indicators, and determine how monitoring gaps can affect an organization’s ability to detect and respond to threats.
Want to solve more CTF challenges?
Unlock 25+ more hands-on challenges across Web Exploitation, Reverse Engineering, Cryptography, and SOC investigations.
More Challenges in the ERNITH Arena
Click any challenge below to unlock instant access by signing in or creating a free account.
Hidden Metadata Mystery
Analyze the provided PDF for hidden metadata, uncover the concealed encoded value, decode it and recover the final flag. Attention to detail and forensic investigation are key to solving this challenge.
Password Vault Investigation
Analyze the provided employee password vault to identify weak password practices, answer the challenge questions and construct the final flag. This challenge focuses on password auditing and digital hygiene.
Phishing Email Investigation
Investigate a collection of email messages, identify phishing attempts using common security indicators, answer the challenge questions, and construct the final flag. Careful email analysis and attention to detail are essential.
Hidden Source Code
Inspect the provided source code files, identify hidden developer comments and recover the concealed flag through basic web reconnaissance and source code analysis.
Resume Intelligence Challenge
Review the provided cybersecurity resume, extract key information, answer five challenge questions and construct the final flag in the required format. Careful document analysis and attention to detail are essential.
Hardcoded Secret Scanner
A small internal Flask application is up for a pre-release security review. Dig through its source code app.py, config.py and database.py and track down every hardcoded secret hiding in plain sight before it ships to production.
Security Policy Challenge
Review enterprise security policy documents to identify security policy violations, weak authentication practices and non-compliant security controls. Apply security best practices to recover the required keywords and construct the final challenge flag.
IOC Threat Hunting
Use threat intelligence and proxy log analysis to identify malicious activity, trace the infected system and recover the final challenge flag through IOC correlation and threat hunting.
Public Cloud Storage Leak
A cloud storage bucket belonging to ERNITH Corporation has been left publicly accessible due to a misconfigured access policy. Explore the exposed bucket, review what's been left inside and see if you can find something that shouldn't be there.
Join the Community of High-Scoring Solvers
Track your solved flags, rise up the live global ranking, earn verified certificates, and showcase your profile to cybersecurity recruiters.