Skip to main content

We use cookies to ensure you get the best user experience. For more information see our cookie policy.

CryptoCabana

He never signed the transfer. The place he stashed his secret wasn't as sealed as promised.

Task 1: Azure Portal Access

Azure CLI

To solve this challenge, you'll need the Azure CLI installed on your device. If you'd rather work from your own workstation instead of the provided environment, here's how to get it set up:

Once installed, verify it's working with az --version.

Azure CLI via Azure Cloud Shell

Alternatively, you may press the Cloud Details button below to generate your Azure Portal credentials.

Once done, get the Username (email) and Temporary Access Pass, and log in to the Azure Portal.

Once logged in, open the Cloud Shell and select Bash.

Then, select No storage account required and choose Az-Subs-CTF for the subscription.

Lastly, execute the command below to validate your shell access.

az account show

You are now ready to solve today's challenge. Good luck and have fun!

Task 2: Cloud Hacker Holidays: Day 9

 
 
 
Hacker Holidays ยท The Byte Lotus Hotel
CryptoCabana
  ๐Ÿš  
๐Ÿš
 
 
 
 
 
 
๐ŸŒด
๐ŸŒด
๐Ÿฅฅ
๐Ÿฅฅ
๐Ÿฆ
๐Ÿน
 
Points
90
Category
โ˜๏ธ Cloud
Difficulty
Medium
 
๐Ÿ›Ž๏ธ Concierge Briefing

By the time he made it back from the breakfast buffet, his wallet had already moved on without him. The transaction was signed, properly signed, just not by him.

He'd backed his seed phrase up weeks ago, into the CryptoCabana kiosk's vault โ€” the one whose landing page promised, in exactly four words, โ€œBacked up. Sleep easy.โ€ Somewhere between that promise and this morning, something else got a good look at what was supposed to stay behind glass.

Your objective: find out what the kiosk is quietly trusting to reach into storage on its own, and see how much further that trust actually extends.

๐Ÿ—๏ธ ROOM ACCESS
Target
https://cryptocabanaf5scjagc.z13.web.core.windows.net/
๐Ÿ–๏ธ TODAY'S ITINERARY
 Pull apart what the kiosk hands out for free before you've even clicked anything.
 Follow that trust somewhere the kiosk's own page never once points you.
 Somewhere in there is a second, more valuable set of keys โ€” and a vault that won't give up the real values on the first ask.
๐Ÿ“ธ @0xMia's STORY
  @0xMia ยท posted after breakfast

"the backup kiosk is SO confident. 'sleep easy' it says ๐Ÿ’€ reader, do not sleep easy. also: if a value looks freshly rotated, ask yourself what it looked like five minutes before that ๐Ÿ‘€"

Cloud Azure Storage Key Vault

Answer the questions below

  1. What is the flag?

Room Icon

CryptoCabana

He never signed the transfer. The place he stashed his secret wasn't as sealed as promised.

medium

60 min

9,993

User profile photo.
User profile photo.

To access material, start machines and answer questions login.

Hacker Holidays 2026 - Day 9 - CryptoCabana
Source: YouTube

Azure

To solve this challenge, you'll need the Azure CLI installed on your device. If you'd rather work from your own workstation instead of the provided environment, here's how to get it set up:

Once installed, verify it's working with az --version.

Azure CLI via Azure Cloud Shell

Alternatively, you may press the Cloud Details button below to generate your Azure Portal credentials.

Join Lab button inside the Cloud Details modal.

Once done, get the Username (email) and Temporary Access Pass, and log in to the Azure Portal.

Credentials to access the Azure Portal.

Once logged in, open the Cloud Shell and select Bash.

Starting the Azure Portal's Cloud Shell.

Then, select No storage account required and choose Az-Subs-CTF for the subscription.

Configuring the Cloud Shell access.

Lastly, execute the command below to validate your shell access.

az account show

Validating the Cloud Shell access.

You are now ready to solve today's challenge. Good luck and have fun!

 
 
 
Hacker Holidays ยท The Byte Lotus Hotel
CryptoCabana
  ๐Ÿš  
๐Ÿš
 
 
 
 
 
 
๐ŸŒด
๐ŸŒด
๐Ÿฅฅ
๐Ÿฅฅ
๐Ÿฆ
๐Ÿน
 
Points
90
Category
โ˜๏ธ Cloud
Difficulty
Medium
 
๐Ÿ›Ž๏ธ Concierge Briefing

By the time he made it back from the breakfast buffet, his wallet had already moved on without him. The transaction was signed, properly signed, just not by him.

He'd backed his seed phrase up weeks ago, into the CryptoCabana kiosk's vault โ€” the one whose landing page promised, in exactly four words, โ€œBacked up. Sleep easy.โ€ Somewhere between that promise and this morning, something else got a good look at what was supposed to stay behind glass.

Your objective: find out what the kiosk is quietly trusting to reach into storage on its own, and see how much further that trust actually extends.

๐Ÿ—๏ธ ROOM ACCESS
Target
https://cryptocabanaf5scjagc.z13.web.core.windows.net/
๐Ÿ–๏ธ TODAY'S ITINERARY
 Pull apart what the kiosk hands out for free before you've even clicked anything.
 Follow that trust somewhere the kiosk's own page never once points you.
 Somewhere in there is a second, more valuable set of keys โ€” and a vault that won't give up the real values on the first ask.
๐Ÿ“ธ @0xMia's STORY
  @0xMia ยท posted after breakfast

"the backup kiosk is SO confident. 'sleep easy' it says ๐Ÿ’€ reader, do not sleep easy. also: if a value looks freshly rotated, ask yourself what it looked like five minutes before that ๐Ÿ‘€"

Cloud Azure Storage Key Vault
Answer the questions below

What is the flag?