Cybersecurity 2026


Desert CodeSprouts.

Cyber Ninja Mission

Welcome to the Cyber Ninja Mission! As Ghost Needle, an White Lotus Ninja undecover in the Shadow Claw clan, you will be stepping into the world of cyber espionage, exploring 3 core cybersecurity concepts in this mission: Confidentiality, Social Engineering, and Integrity through 3 challenges.

Instructions

In all 3 challenges, you will be on the lookout for a flag that looks something like this: pwn.college{kzGwEoiX8wegjBpgYSjtzU.QXKESO2EDLxUDN0QzW}

Once you complete each challenge, a window will pop up with the flag on your browser. Submit this flag in the pwn.college interface to complete the challenge.

Confidentiality: Decrypting White Lotus's Message

The White Lotus clan has sent you an urgent encrypted message, but the words make no sense at first glance. You know the message was encrypted using a Keyword Substitution Cipher. Your task is to reconstruct the cipher keyword and decrypt the message.

You are given the ciphertext along with the tools needed to map out the substitution. As you correctly fill in more of the key, the decrypted message will begin to make sense.

Once you have fully decrypted the message and the keyword that corresponds with the cipher shift, submit it in the text box to get the pwn.college flag.

Social Engineering: Impersonating Red Fang

Now that you know the plan, you need to act fast. Your task is to write a convincing fake order, impersonating Red Fang, the leader of Shadow Claw, redirecting the Shadow Claw Raiders from Yang Vault to the worthless Yin Vault.

You are given a message builder to craft this fake order. A classifier will score how convincingly your message reads as an authentic internal clan communication. Once your score crosses the threshold, the Raiders are fooled and sent to the wrong vault.

Integrity: Forging the Dragon Scroll

The Raiders are heading to Yin Vault, but there's a scroll there, and it needs to look convincing. Your task is to modify the contents of the Dragon Scroll so the Shadow Claw stays misled, while ensuring the hash of the message stays the same.

You are shown the real Dragon Scroll and must carefully flip a specific word to construct a fake version that looks structurally identical, but sends Shadow Claw on a completely useless quest.

Once you've found the right combination, the Dragon Scroll in Yang Vault is safe. Submit your flag to complete the challenge.


Thank you for playing the Cyber Ninja Mission and saving the Dragon Scroll from the evil Shadow Claw clan!



Challenges

(After starting the challenge the web app can be found at https://pwn.college/workspace/challenge, inside your browser, or, http://challenge.localhost inside the VNC Desktop)

Connect with SSH

Link your SSH key, then connect with: ssh [email protected]

(After starting the challenge the web app can be found at https://pwn.college/workspace/challenge, inside your browser, or, http://challenge.localhost inside the VNC Desktop)

Connect with SSH

Link your SSH key, then connect with: ssh [email protected]

(After starting the challenge the web app can be found at http://challenge.localhost inside the VNC Desktop - this challenge will not work from your browser)

Connect with SSH

Link your SSH key, then connect with: ssh [email protected]

30-Day Scoreboard:

This scoreboard reflects solves for challenges in this module after the module launched in this dojo.

Rank Hacker Badges Score