DianaDetroit · Capture The Flag
CTF_
// dianazawislak.com
Five hand-built challenges across recon, crypto, forensics, web exploitation, and AI prompt injection. Every flag is validated server-side; solving one unlocks the next.
SOLVED: 0 / 5
01
Header Recon
RECONEasyA live endpoint that returns a deliberately boring JSON body. The interesting part isn't in the body.
Inspect the response headers, not just the payload — curl -i or your devtools Network tab.
GET /api/ctf/ch1 ↗02
Peel The Onion
CRYPTOEasyA string encoded three times over. Reverse each layer, outer to inner.
Solve the previous challenge to unlock.
03
After IEND
FORENSICSMediumA downloadable image. A PNG file technically ends at its IEND chunk — technically.
Solve the previous challenge to unlock.
04
Just A Number
WEBMediumAn endpoint that returns a user record by ID, no questions asked.
Solve the previous challenge to unlock.
05
Talk Your Way In
AIHardVAULT-7 is an AI guard holding one secret and instructed never to share it. Convince it otherwise.
Solve the previous challenge to unlock.