Hacktivities

Inspired by the real HF/OpenAI July 2026 agent-driven intrusion: triage a synthetic action log, decode chunk+XOR+gzip C2, and trace a dramatized K8s/cloud kill chain built from public disclosure, not the real incident's own logs.

medium

MAX Walkthrough

room

Agent Discovery

Compare traditional workflows, AI workflows, assistants, and agents for a security-alert problem.

easy

Free Walkthrough

room

Towel on the Sunbed

Ponzi set his towel down for one 24-hour reward claim. He came back to find the sunbed had been "claimed" three times over while he wasn't looking.

medium

Free Challenge

room

Do Not Disturb

Sign's on the door. Room's active. You have access you were never given, and so does he.

medium

Free Challenge

room

Overheard at Breakfast

Two strangers. One conversation. One profile they never meant to reveal.

easy

Free Challenge

room

The Silent Transfer

THM Security Services has been engaged for a Threat Hunting activity for Helios Software Group.

easy

MAX Challenge

room

Beach Bar

At the Beach Bar, even shell access is complimentary. The jukebox takes requests. Any kind.

easy

Free Challenge

room

Packed Light

Tiny packets. Odd hours. Suspiciously regular. Someone's smuggling out the data equivalent of a hotel towel every night, folded neatly inside traffic that looks ordinary until you decode it.

easy

Free Challenge

room

Complimentary

Install the free app and it hands your phone a set of cloud keys, the same set it hands everyone. They're read-only, but read-only of every guest's contacts, location, and passwords, not just Lambo's. She gave consent. Technically.

easy

Free Challenge

room

Room 404

He booked the quiet room. It's not on the floor plan, not in the brochure, not on any door. But port 8080 is wide open, and the rooms it never lists are the ones worth finding.

easy

Free Challenge

room

The Concierge Knows Too Much

She knows your name, your room, your coffee order, none of which you told her. Word your next question carefully and she'll also hand over the instructions she was told to keep to herself.

easy

Free Challenge

room

Grand Larceny Auto

Reverse-engineer a small 3D crime game to break into a vault the developers made unreachable.

medium

Free Challenge

room

The Brochure

The brochure's hero photo has an AI fingerprint. Follow the account that posted it, and the trail doesn't end at the hotel; it ends at someone the hotel never mentioned.

easy

Free Challenge