Resources & Tools
Every challenge in this CTF can be solved in your browser — no terminal, no installs, no downloads. When a challenge says "Need a tool for this?", this is the page it means.
Below are free, open-source / browser-based tools grouped by what you're trying to do. Pick the row that matches your task.
🔍 View a page's source code
See the raw HTML behind any web page — including comments and content that isn't shown on screen.
- view-page-source.com — paste a URL and read its full source in your browser.
Built into your browser too: right-click a page → View Page Source (or press Ctrl+U / ⌘+⌥+U). Press F12 (or right-click → Inspect) to open Developer Tools and explore the live page, its elements, and stored cookies.
🌐 Send or inspect network requests (headers, cookies, methods)
Craft an HTTP request with custom headers, cookies, or methods and see exactly what comes back — things a normal browser address bar won't let you do.
- reqbin.com — build and send HTTP requests (GET/POST, custom headers, etc.) right from the browser and read the full response.
🔐 Encode, decode & work with ciphers
A single Swiss-army tool that handles almost everything in the Cryptography category — Base64, hex, ROT/Caesar, Vigenère, XOR — and more. You build a "recipe" by stacking operations, which is perfect for anything that's been transformed more than once.
- CyberChef — "the Cyber Swiss Army Knife." Drag operations into the recipe pane; it also extracts EXIF metadata from images and detects file signatures / magic bytes.
#️⃣ Identify an unknown hash
Not sure what kind of hash you're looking at? Identify the algorithm first, then decide how to attack it.
- hashes.com hash identifier — paste a hash and it tells you the likely algorithm(s).
General tips
- Read the whole page. Challenge pages often hide what you need in source comments, element attributes, response headers, or metadata — not in the visible text.
- Stuck? Every challenge has hints you can unlock from the challenge itself. Some are free; some cost a few points.
- Flags always look like
CTF{...}. Submit them exactly as found unless the challenge specifies a format.