Home
Score: 0 pts
User: —
About

Compete in security challenges exploring Spectre, AES Side Channels, Hertzbleed, Flush+Reload, Fault Injection, and Web Side Channels. Each challenge isolates a real CPU or hardware vulnerability. Download the skeleton code, implement your exploit, and submit it for automated grading. Points decay over time so speed matters.

Getting Started
How to Submit a Program
01
📥
Pick a Challenge
Choose any challenge below. The dots signify difficulty. Read the description and goal, then click Download Skeleton to get your starter .c file.
02
⚙️
Write Your Exploit
Fill in the TODO sections. Use the hint button (−50 pts each) if stuck. Compile locally to verify your code builds cleanly.
03
📤
Upload & Submit
Click Upload & Submit Attack, select your .c file, and wait for the server to compile and run it automatically.
04
🚩
Submit the Flag
Copy the leaked secret from the Results panel and enter it as Flag{...} in the Submit box to claim your points.
Points start at 1000 and decrease as time passes. Submit early for a maximum score. Each hint costs 50 points. Submissions are locked after the flag is submitted.
Leaderboard
# User Total Pts Spectre
Score / Time
AES Side Channel
Score / Time
Hertzbleed
Score / Time
Flush+Reload
Score / Time
Fault Injection
Score / Time
Web Side Channel
Score / Time
Loading…
Challenges
CPU

Spectre

Exploit speculative execution to recover secret data from another process's memory space using cache timing.

Go to Challenge →
CRYPTO

AES Side Channel

Recover AES key bytes by measuring cache timing differences during encryption rounds.

Go to Challenge →
POWER

Hertzbleed

Exploit CPU frequency scaling as a power-based side channel to leak secret key material from timing measurements.

Go to Challenge →
CACHE

Flush + Reload

Use cache flush and reload techniques to spy on another process's memory access patterns.

Go to Challenge →
HARDWARE

Fault Injection

Induce precise hardware faults to bypass security checks and extract values from protected memory.

Go to Challenge →
WEB

Web Side Channel

Exploit timing and behavioral side channels in web applications to infer secret application state.

Go to Challenge →