<h1>Christmas Challenge</h1>
<p><strong>Date</strong>: 2024-12-04</p>
<p><strong>Difficulty</strong>: Beginner to Advanced</p>
<p><strong>Delivered By</strong>: Matthew</p>
<h2>Overview</h2>
<p>For the final session of the year, we have prepared a host of Christmas-themed challenges! Some of these challenges will be based on the sessions given over the last term, and some will cover sessions which are yet to come. These include OSINT, stegonography, web, hardware and cryptography.</p>
<h2>Prerequisites</h2>
<p>For each challenge category, useful information including tool recommendations can be found on previous session pages. Some useful tools include:</p>
<ul>
<li><a href="https://portswigger.net/burp/communitydownload">Burp Suite</a> for intercepting web requests.</li>
<li><a href="https://gchq.github.io/CyberChef/">CyberChef</a> for any challenge involving crypto or encoding.</li>
<li><a href="https://www.kali.org/tools/binwalk/">Binwalk</a> for finding files hidden in other files.</li>
<li><a href="https://mh-nexus.de/en/hxd/">HxD</a>, useful for analysing files or data.</li>
<li><a href="https://ghidra-sre.org/">Ghidra</a> for decompilation and reverse engineering.</li>
</ul>
<p>For the hardware challenge, you will need <code>avr-gcc</code> and Python 3. Global Protect will also be required, even on Eduroam.</p>
<h2>Session Link</h2>
<p>The challenges can be found at <a href="https://christmas.sucss.org/">https://christmas.sucss.org/</a>.</p>
<p>As always, uninformed brute forcing is <strong>not allowed</strong>.</p>
