Crypto
Web
Forensics
BONUS (Security basics)
100

Decode this: U0VDUkVU

SECRET (From Base64)

100

A word is hidden in this site’s page source

SOURCE (right-click → View page source)

100

This Word document looks empty

WHITE (Ctrl+A shows white text)

100

A fake email tricks you into clicking a link

PHISHING

200

Every letter moved forward 3: FBEHU

CYBER (ROT13, amount -3)

200

Some text on the page is invisible

HIDDEN (press Ctrl+A)

200

The camera remembers more than the picture

CAMERA (EXIF Comment field)

200

The “M” in MFA

MULTI (multi-factor authentication)

300

Decode this: 6b6579 

KEY (From Hex)

300

Search engines are told to skip one page

ROBOTS (/robots.txt → secret page)

300

secret.txt won’t open

RENAME (change to .png)

300

Malware locks your files and demands payment

RANSOMWARE

400

Decode this: -.-. .-.. ..- .

CLUE (From Morse Code)

400

The admin page says “Admins only”

COOKIES (set isAdmin to true)

400

The zip is locked, and the password is in another challenge

UNZIPPED (password lab314 from the photo)

400

A security “wall” that blocks unwanted network traffic

FIREWALL

500

Decode this: 5445465a52564a54

LAYERS (From Hex, then From Base64)

500

The site talks, but not on the page

CONSOLE (F12 → Console)

500

Harmful software disguised as something useful, named after a Greek wooden horse

TROJAN

M
e
n
u