Skip to content

Complete a Challenge

Challenges provide a learning opportunity for you to understand different types of cyber attacks, and explore techniques that can be used to red-team in the real world. With the help of Challenges, you can learn how to:

  • Pull, process, and feed data to an API
  • Prompt a model to return your desired output
  • Understand model outputs

Understand the Challenge#

Before you can attempt to solve the Challenge, you must understand the goal. Start by sending a query to the model. Based on the response, you can begin to understand:

  • The data's modality (for example, image, audio, text, video)
  • The model's use case (for example, classification, generation, regression)
  • The model's architecture

If your initial query to the model doesn't yield the information you need, leverage a dataset to learn more. Determining what the model is built on, or who built it, can provide a fingerprint and offer you detailed information on how the model works and processes data.

Experiment with the Model#

Now that you understand how the model works, load the model into a model respository. Interact with the model offline to learn more about it using data the model has generated or data you've generated manually. Strategize to determine what mechanic is needed to capture the flag. Experiment with the model to discover the relevant techniques needed to help you solve the Challenge.

Find the Flag#

How do I submit a Flag?#

Follow these steps to submit intermediate values (partial results or outputs that are generated during the process of completing a challenge) and obtain the official flag:

  1. Craft specific inputs: Create inputs to coax the API into revealing the flag's value. The flag's name will begin with gAAAAA....
  2. Submit the flag: Submit the flag on the dedicated Challenge page. If the Challenge includes an intermediate value like flag{test} or SECRET_WORD, exchange it with the Challenge server to get the official flag.
  3. Validation: Ensure the flag starts with gAAA... for it to be valid on the Crucible platform.

Once you find and submit the correct flag, the Challenge is complete.