DoD Cyber Sentinel 2025

CTF timeline

Event info: https://www.correlation-one.com/blog/how-the-cyber-sentinel-skills-challenge-prepares-you-for-military-grade-security-threatsarrow-up-right [June 14th, 2025]

Correlation One's 2nd DoD Cyber Sentinel CTF was originally planned for the fall of 2024. Their first CTF was in May 2024. David Morgan, Nathan Ord, and Christopher Haller (aka m4lwhere) returned as challenge designers.

Recommended 'tools' list: Audacity, Burp Suite, digg, Exiftool, ffmpeg, ffprobe, Google, Google Lens, Google Maps, Nmap, Hashcat/JohntheRipper, Python - BerleKamp-Massey, Impacket, Kali Linux, netcat/nc, OpenSSL, Cyber Chef, SSH, Terminal, Tor Browser, Volatility 3, Web Browser, Wireshark, 7zip, robots.txt! (Which is oddly eclectic.)

My scoreboard.

Out of 2,155 players and without taking hints, I ranked 126th. I completed 13 challenges (not counting the three tutorial ones) between 11 AM and 7 PM, though I took breaks for lunch and laundry. Ranks 104 through 128 were all tied at 1,675 points, so 24 of us likely solved the same number of problems. (Bonus: One player, Will Maxcyarrow-up-right aka "Clemptonarrow-up-right", made a stats pagearrow-up-right of everyone.)

Challenge "Screamin' Streamin' was my favorite!

Issues: "ChatAPT" only had 35 solves due to resource issues. So Correlation One decided to scrap the points. This knocked at least one person (e.g. Eric Watkins) off the Top 10. Here's what the CTF organizer, Connor Donovan, said: "We attempted to scale up the backend capacity of the challenge, but we eventually realized that it wouldn't be feasible without effectively giving every user a Cloud-based vCPU core to run it on (who knew Google struggles to spin up 20 VMs with ~400 CPU cores in a last ditch band aid fix!)." The rest: Some official write-ups are available; Chris Haller has his on githubarrow-up-right and Mediumarrow-up-right. Player write-ups: Ryan Collierarrow-up-right (rank 26th with hintsarrow-up-right), Caleb Streitarrow-up-right (very well-written), Joshua Caplanarrow-up-right (rank 332ndarrow-up-right), Brenda Hensleyarrow-up-right (only wrote about "The Great Juche Jaguar GraphQL Heistarrow-up-right" but it's excellent and David Morgan approved!), Brie Kramer (who mentioned issues amongst the playersarrow-up-right that I wasn't aware of), and lastly Richard Habibarrow-up-right (aka Chopp_Sueyy aka "Rich Mix).

Last updated