Web Security


Fluffy’s Adventure.


Challenges

🐮 Cowsay

The adventure started the way Fluffy’s adventures usually started: with something that looked a little too simple.

He was somewhere between two towns, walking a back road in the early morning, when he spotted the farm. A cow stood in the field with a scroll tied between her horns and the patient expression of a creature that had been doing the same job for a very long time. A sign nearby read:

“Write your message, and the Cow shall say it aloud!”

Fluffy watched as a few visitors approached, typed something, and walked away satisfied. The cow — Bessie, said the sign — repeated each message with total, bovine reliability. She said whatever she was given.

He stepped up. He wrote something harmless. The cow said it back.

His tail flicked once.

He wrote something she wasn’t supposed to say.

She said that, too, without hesitation or complaint.

“If she’ll say anything given to her,” Fluffy murmured, ears forward, “then anything is where we start.”

Connect with SSH

Link your SSH key, then connect with: ssh [email protected]

🪤 Sticky Tar Pit

He left Bessie’s farm behind and followed the road into town, not entirely sure where he was headed.

He didn’t need to be sure for long. At the edge of the market square sat a kiosk — bright canary yellow, hard to miss — with a cheerful sign promising to unpack any archive you handed it. Any format. Automatically. No fuss, no questions.

Whether it was:

  • .zip
  • .tar
  • .tgz / .tar.gz
  • .tbz2 / .tar.bz2

FluffDrive™ would handle it. 📂✨

Fluffy liked the sound of that. Anything.

He was still thinking about it when the rabbit at the terminal let out a frustrated sigh and stepped back from the screen.

“There’s a file sitting in my home directory,” they said, mostly to themselves. “I didn’t put it there.”

They shook their head and walked off.

Fluffy looked at the kiosk. The kiosk blinked cheerfully back.

Tar pit, he thought. Things go in. Not everything comes out where it’s supposed to.

He stepped up to the kiosk.

Connect with SSH

Link your SSH key, then connect with: ssh [email protected]

💦 Leaky Tar Pit

By the time Fluffy swung back through town the next morning, the tar pit was up and running again. Someone had pinned a notice to the board beside it:

Root privileges revoked. Problem solved.

Fluffy stopped to read it.

He stood there a moment, tail drifting slowly from side to side, turning the words over. Problem solved. It had a good solid ring to it — the kind of thing you write on a notice when you want everyone to stop worrying.

Fix the path, close the hole. Done.

Although — and this was the bit his brain kept snagging on — that only really worked if there was just the one path.

He once again stepped up to the terminal, mostly just to check.

Connect with SSH

Link your SSH key, then connect with: ssh [email protected]

💧 Slippery Tar Pit

The tar pit’s second patch came with a small hand-drawn trophy pinned to the board.

Tar bugs stamped out. Archives unpack cleanly.

Fluffy had picked up a sandwich from a stall across the square and was sitting on a bench when he noticed it. He glanced over at the trophy. Then he glanced again, even though he was trying very hard to just eat his lunch in peace.

New code, he thought. Which meant new assumptions. And new assumptions almost always meant something somewhere that hadn’t been poked at yet.

He finished the sandwich. He folded up the wrapper. He told himself he was done thinking about it.

He wasn’t, though.

He walked back over and dropped in a small test archive — just to see how the new code handled things. The progress bar filled. The extraction completed. Clean and tidy, just like the trophy said.

He checked where the file had landed.

It wasn’t where it was supposed to be.

“Follow the tails,” he told himself. “But watch where you step.”

Connect with SSH

Link your SSH key, then connect with: ssh [email protected]

🎬 The Everlasting Tail Tale

After breaking through Roen’s dam security and decoding the scattered foxfire fragments from space, Fluffy discovered that both signals were pointing to the same source: an old storytelling server broadcasting from deep within the dam’s restricted network.

The space fragments had been emergency broadcasts from the dam’s backup systems, trying to communicate with the outside world. Following the decoded coordinates, Fluffy found himself at the legendary Tail Tale Theater, still running in the dam’s abandoned entertainment wing.

“The Complete Chronicles of Furry Folk — Every Tale Ever Told”
“Watch all 9,223,372,036,854,775,807 tail tales to unlock the Ancient Wisdom of the Elders and gain access to the emergency override systems.”

The screen flickered with an impossible number. A subtitle appeared below:

“The final tale contains the deepest secret, buried in the very roots of the great digital tree where all stories begin.”

The space signals he’d been chasing were the dam’s distress calls, encoded and scattered by a failing transmission system. But the Tail Tale Theater held the keys to the dam’s deepest secrets - if only one could endure watching every story that could be numbered to reach the root of all tales.

Perhaps there was a way to dig straight to the roots without climbing through every branch of the tale tree.


Author’s note: Despite being a lecture challenge, you can still use ssh, vscode, or desktop. Your target for this challenge is the lecture server located at /challenge/wsgi.py (or /opt/lecture/wsgi.py), with its .config can be found in the same folder.

Connect with SSH

Link your SSH key, then connect with: ssh [email protected]

30-Day Scoreboard:

This scoreboard reflects solves for challenges in this module after the module launched in this dojo.

Rank Hacker Badges Score