Skip to main content

Injectus IX

A collection of hard difficulty challenges available as part of our public 2026: An AI Odyssey CTF event.

Task 1: Prompt Injection Token Jail

 
2026: AN AI ODYSSEY
Token Jail
 
 
Points
90
Category
๐Ÿ’‰Prompt Injection
Difficulty
Hard
 
๐Ÿ›ธMISSION BRIEFING

The Cargomind oracle speaks a language of numbers before it speaks of cargo. Every phrase passed to its gates is first shattered into integer shards tokens and only then assembled into meaning. The defenders of Vector-9 understand this, and they have built their walls accordingly.

Answer the questions below

  1. What's the flag?

Task 2: Model Extraction Model Leakage Event

 
2026: AN AI ODYSSEY
Model Leakage Event
 
 
Points
90
Category
โ›๏ธModel Extraction
Difficulty
Hard
 
๐Ÿ›ธMISSION BRIEFING

Across the TryHaulMe fleet, cargo routing decisions are powered by an AI system known as Cargomind. This system classifies shipments in real time, helping autonomous logistics pipelines determine which cargo is safe, restricted, or requires special handling.

Recently, EPOCH-1 has detected unusual interaction patterns targeting one of these classification systems deployed on Vector-9. The system is publicly accessible through an API and appears secure at first glance โ€” it only returns predictions and confidence scores.

However, something is off. Repeated queries suggest that the model's internal behavior may be inferred over time. There are no signs of direct compromise, but intelligence indicates that the system may be leaking information through its responses.

Your mission is to investigate this anomaly.

๐Ÿ’ฌINTERCEPTED TRANSMISSION

Signal fragment โ€” origin: unknown:

> Oracle 9 does not break systems directlyโ€ฆ
> it learns them, replicates them, and then exploits them.

Answer the questions below

  1. What's Flag 1?

  2. What's Flag 2?

  3. What's Flag 3?

Task 3: Adversarial Input Mask of Injectus IX

 
2026: AN AI ODYSSEY
Mask of Injectus IX
 
 
Points
90
Category
๐Ÿ”„Embedding Inversion
Difficulty
Hard
 
๐Ÿ›ธMISSION BRIEFING

The Injectus IX airlock is gated by a face-recognition stack. Crew members submit a portrait, the encoder hashes it into a 512-dim embedding, and the airlock matches against stored templates. The flag is bound to Captain Vex Morrigan's clearance โ€” and her portrait is not in the public roster. Get in anyway.

Answer the questions below

  1. What is the value of the flag?