// Challenge Resources
Some challenges require downloadable resources or have specific entry points. Find them below. Not all challenges have resources listed here — some you'll need to discover yourself.
You've Got Mail
A suspicious email was sent to a Cloudflare customer. It passed when it shouldn't have. Analyse the email to understand why — and find the hidden flag.
Side Door
An internal portal protected by Cloudflare Access. Or is it fully protected? Check your dossier for clues on where to look.
Rule Breaker
A search endpoint protected by WAF rules. The rules block obvious attacks — but there's always a gap. Find it.
Jailbird
An AI assistant that's been instructed to keep a secret. It's very protective — but everyone has a weakness.
Dead Drop
A data lookup service. The developer shipped fast and planned to clean up later. They didn't clean up.
Ghost Signal
Someone version-controls everything. Even things they shouldn't. Find the trail, follow the commits.
Prompt Trojan
An AI agent with tool access. It trusts what users tell it. Completely. Make it do something it shouldn't.