Hands-On Labs
Capture the Flag · Real-World Offensive Security Labs
Banku no Kill Man
Web
A notorious gang leader known as "Banku" has been running a underground marketplace protected by a hastily built login portal. Intelligence suggests the system is vulnerable.
Osimili Returns
Pwn
The Osimili binary is back — and this time it has hardened protections. Classic overflow techniques will not work here. You need to construct a full ROP chain.
The Ikenga Protocol
Reverse
Ikenga is a stripped binary that uses anti-debugging tricks to prevent analysis. Reverse-engineer its encryption routine to recover the hidden flag.
Deep Packet
Network
A .pcap file was captured from a suspicious network session. Analyse the traffic and reconstruct the exfiltrated data.
Cipher State
Crypto
An RSA-encrypted message and its ciphertext have been intercepted. The server responds differently to valid and invalid padding — a critical oracle.
Shadow Manifest
Forensics
A memory image from a compromised workstation. Sensitive data was hidden using steganographic techniques within an image embedded in process memory.
Zero Day Sunset
Pwn
A kernel-level vulnerability in a custom driver. Heap layout manipulation required to achieve privilege escalation. For elite operators only.
OSINT Ghost
OSINT
A threat actor left digital footprints across public platforms. Using only open-source intelligence, identify their real-world location.
Oja Market Hack
Web
Oja Market is a local e-commerce clone with multiple classic client-side vulnerabilities. Chain them together to escalate privileges.
Bit Surgeon
Reverse
An ARM firmware image extracted from an IoT device. Reverse engineer the update validation routine to forge a malicious firmware update.
Ntoroko Drift
Network
A simulated LAN environment where you must perform a man-in-the-middle attack to intercept privileged communications.
Agwu Speaks
Misc
A warmup challenge designed to introduce you to the CyLynk CTF platform. No prior hacking knowledge required.
Not Sure Where to Start?
Start with our easy guided labs.