SANS Institute & Counter Hack - Holiday Hack Challenge 2023

Information Security - Practical Skills and Awareness

This year's SANS Holiday Hack Challenge featured a series of offensive and defensive capture-the-flag exercises ranging from some relatively simple JavaScript and Browser manipulation to a full-blown Azure cloud infiltration via a complex Azure API-based enumeration and manipulation of certificate weaknesses. Oh and a satellite control system to hack and save the planet.  Over 15,000 people signed up this time with the competition phase ending on 5th January 2024. SANS kindly maintains the CTF environments for a year or two after the event, so it's not too late to go and take a look.

Mike had a busy Christmas entertaining the masses at home this year, but managed to complete 19 out of 22 challenges by deadline. Naturally he finished the remainder and published his customary solution write-up in the following weeks. The wrap-up session held on 18th January identified 281 completed the full set by deadline, with around 350 making it to 19/22. You can find details of the best solution write-ups and competition winners on the SANS Website.  Mike's write up for this and previous competitions is also available to review.

Recent visitors:
Sulzbach Rosenberg 2026-09-11 01:21:03
Bangladesh 2026-09-11 01:36:06
Phitsanulok 2026-09-11 01:47:20
Pābna 2026-09-11 04:02:05
Nanjing 2026-09-11 04:06:09
Vecindario 2026-09-11 04:32:14
North Jakarta 2026-09-11 05:16:20
Singapore 2026-09-11 08:10:20
Guangzhou 2026-09-11 10:15:36
France 2026-09-11 10:24:07
Atlanta 2026-09-11 10:24:29
Alfafar 2026-09-11 10:40:07
Riga 2026-09-11 11:33:15
Warsaw 2026-09-11 12:15:13
Dulles 2026-09-11 12:34:21
City of London 2026-09-11 13:11:28
Czechia 2026-09-11 13:35:12
Zug 2026-09-11 13:46:44
Manado 2026-09-11 13:58:31
Falkenstein 2026-09-11 14:47:15
Hong Kong 2026-09-11 15:03:47
Miami 2026-09-11 15:29:44
Slough 2026-09-11 16:22:30
SEMrush Bot 2026-09-11 16:33:19
Dubai 2026-09-11 16:47:39
Tower Hamlets 2026-09-11 17:25:15
The Dalles 2026-09-11 17:43:44
Naples 2026-09-11 18:34:15
North Charleston 2026-09-11 19:21:47
Council Bluffs 2026-09-11 20:49:52
Bingbot 2026-09-11 21:11:00
Romania 2026-09-11 22:21:21
Bulgaria 2026-09-11 22:32:19
Ahrefs Bot 2026-09-11 22:37:22
Khobar 2026-09-12 00:36:05
Bangkok 2026-09-23 07:31:37
Tula 2026-09-23 09:20:47
Dhaka 2026-09-23 10:24:49
Huawei PetalBot 2026-09-23 10:31:55
Zarqa 2026-09-23 11:25:16
Russia 2026-09-23 11:33:20
Amsterdam 2026-09-23 11:52:33
Lviv 2026-09-23 12:27:02
New Delhi 2026-09-23 12:37:08
Durban 2026-09-23 13:41:13
Germany 2026-09-23 14:01:02
China 2026-09-23 14:11:04
The Netherlands 2026-09-23 14:11:11
Seoul 2026-09-23 15:04:29
Zurich 2026-09-23 15:43:17
Samarkand 2026-09-23 15:44:32
Boardman 2026-09-23 16:13:34
Nairobi 2026-09-23 16:32:35
Frankfurt am Main 2026-09-23 16:33:06
Baiduspider 2026-09-23 16:50:59
United States 2026-09-23 17:02:22
Toronto 2026-09-23 18:14:59
Roma 2026-09-23 18:46:30
Staffolo 2026-09-23 19:18:03
Ashburn 2026-09-23 19:23:19
Tokyo 2026-09-23 21:32:48
Brussels 2026-09-23 22:03:59
Beijing 2026-09-23 22:34:58
Muriaé 2026-09-23 22:56:41
Googlebot 2026-09-23 23:05:22
Santa Marta 2026-09-23 23:50:22
YandexBot 2026-09-23 23:59:39
Columbus 2026-09-24 00:05:35