Welcome to Cyberbanak

Browse through our content or search for specific topics.

Level 1 Lessons
CIA Triad
Confidentiality, integrity, availability (CIA) triad: A model that helps inform how organizations consider risk when setting up systems and security policies
Level 1 Lessons
What is Cybersecurity?
Cybersecurity helps protect our data and devices from hackers and online dangers. This lesson explains the basics and why it’s important in everyday life.
Level 2 Web CTF
The Hidden Password!
A secret glimmers within the code — each fragment of hex conceals a trace of meaning. Assemble the pieces, and clarity will emerge from the static.
Level 4 CTF
Buffer Buffet
A 32-bit Linux ELF binary contains a classic stack buffer overflow vulnerability. The binary has no modern protections like ASLR or NX enabled, making it a perfect target for learning basic buffer overflow exploitation techniques.
Level 1 CTF
Overflow 101
Here's a simple binary exploitation CTF challenge example in C, focused on a classic buffer overflow vulnerability. It's designed to be solvable and educational for beginner to intermediate players.
Level 4 Web CTF
SecureCache Inc.
Welcome to SecureCache Inc.! We've implemented an aggressive caching system to speed up our web application. Our admin regularly checks the homepage to ensure everything is running smoothly. Your mission: Find a way to steal the admin's session cookie.
Level 2 Web CTF
Injection point
SecureBank’s shiny new login isn’t secure at all — a tiny SQL flaw lets anyone slip in as admin and snatch the flag. Classic injection strikes again!
Level 2 Web CTF
Ascendancy
The interface lies. Trust is misplaced. Watch the requests, not the buttons. When assumptions replace validation, privilege appears. Ascendancy rewards those who listen to what the server accepts—and what it forgets to refuse.
Level 3 Web CTF
Trust Issues
The application uses JWTs with multiple supported algorithms. The verification logic trusts user-controlled headers. Carefully inspect how the server selects its signing method and how the public key is used during token validation.