initial commit

mobile/keypad-oracle/README.md

@@ -0,0 +1,21 @@
+# Keypad Oracle
+
+**Category:** Mobile
+
+**Points:** 200
+
+## Description
+
+\<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/keypad_oracle.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail">\</iframe>
+\<sup>Created By: \<code>@G2Gh0st\</code>\</sup>
+
+We’ve infiltrated DEADFACE’s development pipeline and extracted an iOS application currently under development. We've successfully run it using an iOS Simulator, but can't break the code. Can you use your skills to figure out the secret message?
+
+Enter the flag as text: `deadface {flag_text}`.
+
+[Download ZIP](https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/challenges/mob/mob05/Keypad-Oracle.app.zip)(80KB)\<br>
+\<sup>SHA256: `7bfda8f6fa3bebbe29a6e18c4312a29ec9a3cdfda394eb01d39a59df849af49e`\</sup>
+
+## Services
+
+- [https://deadface.sfo3.cdn.digitaloceanspaces.com](https://deadface.sfo3.cdn.digitaloceanspaces.com)

mobile/locked-or-not/README.md

@@ -0,0 +1,21 @@
+# Locked... or Not?
+
+**Category:** Mobile
+
+**Points:** 150
+
+## Description
+
+\<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/locked_or_not.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail">\</iframe>
+\<sup>Created By: \<code>@G2Gh0st\</code>\</sup>
+
+One of DEADFACE's junior developers has shared a new Android app that they wrote to store secure notes. We managed to get our hands on it, but when we run it, the secure note requires a password that we just can't figure out. Can you use your skills to tear the app apart and find the flag?
+
+Submit the flag as: `deadface{flag_text}`.
+
+[Download ZIP](https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/challenges/mob/mob06/df-securenotes.apk.zip)(~11KB)\<br>
+\<sup>SHA256: `b5f6e9a0a75f404103fc2d08542165015f8934e8d76433a513ca1a4705f006ca`\</sup>
+
+## Services
+
+- [https://deadface.sfo3.cdn.digitaloceanspaces.com](https://deadface.sfo3.cdn.digitaloceanspaces.com)