Our Blog

Capchan – Solving CAPTCHA with Image Classification

Reading time: ~35 min
Posted by adriaan.bosch@orangecyberdefense.com on 13 March 2025
Categories: Ai, Ctf, Neural-nets, Tool
A few years ago, I tried my hand at the, now retired, CAPTCHA Forest CTF, which was part of the...

Deck of Cards CTF

Reading time: ~9 min
Posted by Jason Spencer on 19 February 2024
Categories: Ctf, Training
I created a small crypto style CTF for Black Hat last year (we’re training again this year, check our courses...

Black Hat Card Deck CTF

Reading time: ~8 min
Posted by Jason Spencer on 31 October 2023
Categories: Ctf, Training
In 2023 we, the training team within Orange Cyberdefense and specifically Ulrich Swart, Matthew Hughes and myself, attempted to do...

me vs request smugglingPOST

Reading time: ~17 min
Posted by Leon Jacobs on 19 July 2022
Categories: Ctf, Requestsmuggling, Http2
I’ve come to realise that I wasn’t the only one that has never actually exploited an HTTP Request Smuggling vulnerability,...

sensecon 2021 – wargames edition

Reading time: ~13 min
Posted by Leon Jacobs on 28 September 2021
Categories: Challenge, Ctf, Hackathon, Sensecon 2021, Sensecon
If last year taught us anything, it was that we can move quickly to organise a fully online hacker conference...

Hack-From-Home Challenge Walk Through

Reading time: ~9 min
Posted by Jason Spencer on 24 April 2020
Categories: Ctf, Training
On the 27th of April 2020 SensePost created a CTF challenge (https://challenge.sensepost.com) for the public. The names of those who...