// hackeroceanthe arena

Break it. Capture the flag. Climb.

Practical challenges — you download real artifacts and exploit live targets, then submit the flag. Verified server-side, constant-time. Every solve feeds your streak and your rank.

Leaderboard sign in to record solves →

Web

easy50fm

Leaky Cookie

A session cookie is missing the flag that stops JavaScript from reading it.

1 solves

medium150fm

Ghost in the Params

The staff API hands out records by id with no authorization. Climb to the top.

1 solves

Crypto

easy50fm

Spin Cycle

An intercepted note has been rotated. Spin it back.

0 solves

easy75fm

Intercepted

A transmission was captured, but it is only encoded — not encrypted.

1 solves

hard soon

RSA Twins

Two moduli, one shared prime. Factor them both.

Forensics

easy75fm

Evidence Dump

A raw hex dump was pulled from disk. Carve the flag out.

0 solves

Reversing

hard soon

Flat Earth

The binary is packed. Restore it and read the secret.

Binary / pwn

insane soon

Abyssal Overflow

No canary, known libc. Redirect execution.