CELL ACTIVATION PENDING
“One person’s trash is another hacker’s treasure.”
THE MISSION
Public record: the Australian white ibis (Threskiornis molucca) is a native species. Historically rare in urban areas, populations boomed in southeast Queensland from the late 1970s onward. Sea World on the Gold Coast opened in December 1971, and the surrounding wetlands became a noted ibis habitat shortly after. By the 2000s the species was a permanent fixture in the bins of every beachfront food court from Coolangatta to The Spit.
Classified: that’s the cover story.
In December 1971, an alien scout vessel crashed in the wetlands behind what was about to become Sea World. The crew — tall, beaky, omnivorous, hideously well-suited to a humid subtropical climate with abundant tourist chips — adopted the perfect disguise: a native bird already part of the local ecology. They became the urban bin chicken.
By 2000, TipTop Corp — a waste-management conglomerate operating out of a high-rise on Cavill Avenue, suspiciously cosy with every theme park on the coast — had quietly recovered most of the wreck and was reverse-engineering it. Their suspiciously advanced “AI bin-sorting technology” is sold to Dreamworld, Movie World, and Wet’n’Wild. It’s the ship’s nav computer.
It’s now 2026. The mothership is six hours out. The pickup point is the spire of Q1. The crew has one shot.
That’s where you come in. Each team is a cell of operatives. Every flag captured recovers a component. The ship gets rebuilt by the whole room together — but the leaderboard rewards the teams who contribute the most.
You are sitting in Cohort Innovation Space. You are now Cell personnel. Read on.
HOW THE OPERATION RUNS
Two layers
This event runs on two layers at once. They don’t interfere with each other — teams play their own game; the ship gets built as a side effect.
- Competitive layer (leaderboard). Standard CTFd scoring. Points per flag, first-blood bonuses, dynamic decay. Top three cells get prizes.
- Cooperative layer (mothership). Every flag any cell captures contributes one component to a shared mothership on the projector at the front of the room. The room “wins” if enough components come online before the timer runs out.
Wave schedule
| T+ | What happens |
|---|---|
| T+0 | Wave 1 unlocks. Easy / intro challenges across all four categories. |
| T+2h | Wave 2 unlocks. Mid-difficulty challenges. Agent Swoop is “inside TipTop.” |
| T+4h | Wave 3 unlocks — hard challenges + the boss. Two hours on the clock. |
| T+5h | Mothership ETA call. Comms Officer Tagoa goes live. |
| T+6h | Mothership arrives. Final state determines the ending. |
Categories → ship systems
| Category | Ship system | Build phase |
|---|---|---|
| Scrounging | Navigation, sensors, comms | Find our way home |
| Rummaging | Hull plating, structural integrity | Make it fly |
| Scavenging | Shields, defensive systems | Make it survive |
| The Big Score | Reactor, warp drive | Make it go |
Flag format
bin{snake_case_here}. First-blood bonus and dynamic decay apply.
CELL ASSIGNMENT
Step 1 — register a CTFd callsign
The scoring platform is at ctfd.ctf.gcbsides.com. Make an account (any callsign that isn’t offensive). You can do this any time before the event — on the day, allow ~5 minutes if you haven’t.
Step 2 — pick a cell at registration
Cells are chosen on the day when you check in. Walk up to the desk, pick a cell with available headcount, and we’ll hand you the CTFd team join token. You don’t need to coordinate ahead of time.
The eight cells, all Gold Coast beach suburbs:
- BURLEIGH
- BROADBEACH
- COOLANGATTA
- NOBBY
- MERMAID
- PALM_BEACH
- MIAMI
- KIRRA
(Miami is real. Look it up.)
KIT MANIFEST
SOFTWARE
Install ahead of time. None of these have unusual licence terms.
- Modern Chromium or Firefox with developer tools enabled.
- A terminal and an SSH client.
- Burp Suite Community or OWASP ZAP for web challenges.
- Wireshark for PCAP forensics.
- A Python 3 environment with
requests,pwntools, and common crypto libraries (cryptography,pycryptodome). - Common CLI tools:
curl,nmap,binwalk,exiftool,strings,file,xxd,unzip/7z. - A hex editor: HxD (Windows), Hex Fiend (macOS), ImHex (cross-platform).
HARDWARE / VENUE
- Laptop.
- Charger. Power-points are not guaranteed at every seat — consider a power-bank or a short extension lead.
- Headphones.
- External mouse (optional but recommended).
- Water bottle. The room gets warm.
NETWORK
- Venue wifi will be available.
- No VPN required.
- Bandwidth assumes ~150 attendees on the same SSID. Don’t plan on downloading large container images during the event.
RULES OF ENGAGEMENT
- Flag format:
bin{snake_case_here}. - In scope: the challenge containers and the CTFd scoring platform itself, solved as intended.
- Out of scope: other cells’ machines, the CTFd admin surface, event infrastructure (databases, jumpbox internals, ALB, ECS), the venue network and its other users, organisers’ personal devices, anything not explicitly part of a challenge.
- No denial-of-service or destructive actions against any in-scope target. If a challenge appears wedged for everyone, flag an organiser — we will manually credit the component if needed.
- Be cool: asking for hints in the event chat is fine; posting solutions or live flags is not.
NO AI ASSISTANCE
We tested every challenge against current AI tooling. The whole event is solvable end-to-end by an AI. Don’t ruin it for yourself.
If you actually want to test your AI skills — tell an organiser at registration. We’ll put you in a dedicated AI cell that competes on its own track.
DAY-OF CHEAT SHEET
Bookmark #day-of on this page on your phone. This is the reference card you want during the event.
- CTFd
- ctfd.ctf.gcbsides.com
- Flag format
bin{snake_case}- Schedule
- T+0 wave 1 · T+2h wave 2 · T+4h wave 3 + boss · T+6h mothership
- Mothership
- ship.ctf.gcbsides.com (live ship state)
- Stuck?
- Find a Field Marshal in a hi-vis vest.
- Comms blackout?
- Wifi is the most likely failure. Mobile data is fine as a fallback for CTFd.
OPERATION POST-MORTEM
Operation HOMECOMING is concluded. Final standings and selected ops telemetry, captured at console close.
TOP 5 INTERESTING FACTS
- Most-won challenge tier 10 challenges cleared by every cell · Base Case · Caesar's Palace · XOR Door · Hash Slinger · Vigenère Dinner · Wiener Takes All · IAM What IAM · Open Bucket · QR Flock · Layered Trash
- Solves room-wide 234 flags across 6 cells
- Untouched challenges 2 · Pecking Order · Find the Speaker
- Requests served (24h to ALB) 193,932 · 60.7% 2xx · 36% 4xx
- Noisiest service chal-double-dip · 77,432 hits
FINAL STANDINGS
| Pos | Cell | Score | Solves |
|---|---|---|---|
| #1 | BROADBEACH | 6,296 | 43 |
| #2 | KIRRA | 5,546 | 42 |
| #3 | COOLANGATTA | 3,485 | 35 |
| #4 | BURLEIGH | 3,234 | 36 |
| #5 | NOBBY | 2,966 | 35 |
| #6 | MIAMI | 2,706 | 35 |
Snapshot: BCIA console close · ALB telemetry from CloudWatch AWS/ApplicationELB · last 24h of the operation.