Sectalks Ninja Night NN0x12 (18th) - Aethoria Web App CTF

Access & Login

User and Team Registration is required!
Head to /register to register yourself, followed by /teams/new for team creation.

What is a CTF?

A Capture The Flag (CTF) competition is a hands-on cybersecurity challenge where you solve puzzles, break systems ethically, and uncover hidden clues. It’s one of the best ways to learn cyber skills practically, fast, engaging, and rooted in real-world techniques.

Enter a web app that harks back to the age of text based adventure games of ye olde BBS or MUDs.

Aerithoria is a world of floating islands, each with its own unique culture and magic. Aerithoria is a realm filled with floating mountains, cascading waterfalls, and fantastical creatures that soar through the skies. It's a place where the concept of gravity is different, and adventurers often use airships and winged mounts to navigate the breathtaking landscapes.

In Aerithoria, a sinister force known as the Celestial Eclipse has awakened. Led by the enigmatic Dark Seraph, this group seeks to steal the legendary Astral Compass, a mystical artifact that can control the movement of the floating islands. With the Astral Compass in their possession, they intend to plunge the entire realm into chaos, disrupting the delicate balance of Aerithoria.

Our new hero, a skilled cartographer named Kaelin Skystrider, becomes the chosen one to safeguard the Astral Compass and thwart the Celestial Eclipse's nefarious plans. Kaelin possesses a unique talent for mapmaking and navigation, allowing him to understand the hidden connections between the floating islands. Armed with enchanted maps and an airship named the "Zephyr Runner," Kaelin embarks on his quest.

Kaelin's companions include:

1. Seraphina Stormwing, a winged elf with the ability to command the winds and navigate the skies with unparalleled grace.
2. Flint Ironforge, a gnome tinkerer and inventor, who equips Kaelin's airship with ingenious contraptions.
3. Lyria Sunshard, a seer from the island of Sylvaria, who can glimpse into the future and decipher cryptic visions.
4. Draven Emberclaw, a dragonkin warrior with fire-breathing abilities and a deep connection to the ancient dragons of Aerithoria.

Together, they form the Fellowship of the Astral Compass.

There are two CTF flags in this Intermediate (Medium) level Web CTF challenge. Your challenge is to hack the web application Aethoria and find the two flags Skills needed include:

1. Understanding Python code and web browser technologies including JavaScript.
2. Identifying Web Application Vulnerabilities from Source Code
3. Writing an Exploit that will obtain the first flag
4. Writing an Exploit that will obtain the second flag

Let the Game Begin!

Prizes

1st Place Team:

• $10 Gift Cards


• Raspberry Pi Pico for all 3 players