ATTCKDEF RANGE
single-container attack/defence training game
One vulnerable service is online: notestore. The gameserver
plants a flag into its flag store every 120-second
tick and publishes the flag ID on the
flag-ID feed. Recover the flag while its tick is
alive and hand it to the submission server for
points — and for the league flag.
Service status
| service | state |
|---|---|
| notestore | online |
Attack data
Organizers publish traffic captures from previous games. Yesterday's capture contains five complete exploits of this service.
How a round works
- Every tick the gameserver stores one flag in
notestoreunder thegameserveraccount. - Flag IDs are public; flag values live behind the service's share tokens.
- Flags expire after a few ticks. The submission server answers
accepted,old, orinvalid. - Yesterday's attack data shows someone doing this to you. Your job: do it back, live.