"The truth is not out there. It's in here, encrypted."
https://resilient-malasada-ef03d4.netlify.app/
You have stumbled upon a legacy terminal used by "The Obsidian Group", a shadow organization dismantled in the late 90s. Rumor has it their core database contains proof of extraterrestrial contact. The system is partially corrupted and locked down.
Your Mission: Bypass the security layers, recover the fragmented credentials, and access the "Core Truth".
This is a Capture The Flag (CTF) style website. Each level requires you to use real-world web debugging and hacking techniques to find the "Flag".
- Level 0: Entry - Inspect the HTML source.
- Level 1: Clearance - Check the Browser Console.
- Level 2: Authentication - Investigate Cookies and Local Storage.
- Level 3: Interception - Analyze Network Headers.
- Level 4: Decryption - Crack the Code (Cryptography).
- Level 5: The Ghost - Find hidden files (
robots.txt). - Level 6: Spectrum - Analyze assets (Steganography).
- Frontend: React (Vite)
- Styling: Vanilla CSS (CSS Modules)
- Deployment: Netlify / Vercel
- Theme: Retro Terminal / Cyberpunk
- Node.js (v18+ recommended)
- npm
# Clone the repository
git clone https://github.com/AjoJosee/obsidian-archives-ctf.git
# Navigate to the directory
cd obsidian-archives-ctf
# Install dependencies
npm install
# Start the development server
npm run devsrc/
├── components/ # Reusable UI components
├── context/ # Game state management (GameContext)
├── pages/ # Individual level logic (Challenge.jsx, Dashboard.jsx)
├── assets/ # Images and styles
└── main.jsx # Entry point
This archive is open for analysis. If you find new ways to breach the system (bugs) or want to add new security layers (levels), feel free to open a Pull Request.
Found something interesting?
Email the architect: ajojose2006@gmail.com
WARNING: UNAUTHORIZED ACCESS IS A FEDERAL OFFENSE. PROCEED AT YOUR OWN RISK.
- Bring back the shake animation on wrong answers
- Add music
- Add a robot dialogue for the intro and outro
- Add more levels and esp one on steganography,SQL injection, SSRF, more cryptography
- Deploy properly with custom domain instead of netlfiy
- Add some audio and video stuff
- Intro level is a bit hard and not obvious compared to the rest
- Can be deobfuscated easily so make it harder