Miscellaneous (Misc)
Challenges that fit no single category: peeling layered encodings, reading config files, following a chain of clues and analysing logs to reach the flag.
- Track
- CTF challenges
- Estimated time
- 25 min
- Level
- Beginner
Before this lesson
The “misc” category in CTFs is everything that does not fit cleanly under crypto, forensics or reversing. These challenges test observation and the ability to connect clues more than mastery of one tool. You might meet a token wrapped in several layers of encoding that must be peeled in order, a configuration file that leaks a secret someone left behind, a chain of clues that carries you from one endpoint to the next until you reach the flag, or logs you have to read like an analyst to spot the one line that does not belong. The link to the encoding lesson is essential: the first step is always to recognise what kind of data is in front of you before you try to transform it. This lesson trains the flexible mindset these challenges need: start from what you can plainly see, follow the thread one step at a time, and assume nothing before you have verified it.
Labs
A layered token
SolvedEasyDownload
Peel the token layers to extract the flag.
Enter the labLockedA config audit
SolvedMediumDownload
Audit the config, find the leftover blob, and decode it for the flag.
Enter the labLockedFrom a token to a log
SolvedHardDownload
Decode the token to a session id, then find it in the events log to extract the flag.
Enter the labLockedCorrelating two logs
SolvedHardDownload
Find the attacker IP in the auth log, then extract its token from the app log.
Enter the labLocked