initial commit

steganography/conduct-unbecoming/README.md

@@ -0,0 +1,21 @@
+# Conduct Unbecoming
+
+**Category:** Steganography
+
+**Points:** 75
+
+## Description
+
+\<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/conduct_unbecoming.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail">\</iframe>
+\<sup>Created By: \<code>@G2Gh0st\</code>\</sup>
+
+DEADFACE recently breached Night Veil University and exfiltrated a number of internal documents. We were able to recover one of those documents for analysis. We need your help to identify the asset-id that was used to create the document so we can have our investigators analysis it for more clues on how DEADFACE gained access.
+
+Submit the flag as `deadface{flag-text}`.
+
+[Download Image](https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/challenges/steg/steg03/Doc_20261017_0915.jpg)
+\<sup>SHA256: `6e7809f4a7893b0a8348195d0009181376ef635d465a2ee4279e78115e44f1ba`\</sup>
+
+## Services
+
+- [https://deadface.sfo3.cdn.digitaloceanspaces.com](https://deadface.sfo3.cdn.digitaloceanspaces.com)

steganography/exfiltration/README.md

@@ -0,0 +1,21 @@
+# Exfiltration
+
+**Category:** Steganography
+
+**Points:** 75
+
+## Description
+
+\<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/exfiltration.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail">\</iframe>
+\<sup>Created By: \<code>@G2Gh0st\</code>\</sup>
+
+DEADFACE frequently uses unconventional methods to exchange information and avoid detection. Analysts recovered a set of images from a compromised communications channel that appear unrelated at first glance. We suspect the collection contains a hidden message intended for other members of the group. Recover the message and identify what DEADFACE is trying to say.
+
+Submit the answer as `deadface{flagtext}`.
+
+[Download File](https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/challenges/steg/exfiltration.zip) (556 KB)\<br>
+\<sup>SHA1: `ee1186a1bcbce4269e31db58ead46d171e97c17805983cce827822ba36120be3`\</sup>
+
+## Services
+
+- [https://deadface.sfo3.cdn.digitaloceanspaces.com](https://deadface.sfo3.cdn.digitaloceanspaces.com)

steganography/file-dump-01/README.md

@@ -0,0 +1,22 @@
+# File Dump 01
+
+**Category:** Steganography
+
+**Points:** 10
+
+## Description
+
+\<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/filedump.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail">\</iframe>
+\<sup>Created By: \<code>@RP-01?\</code>\</sup>
+
+We have intercepted a DEADFACE hacker's laptop and determined he had stolen a man named Daniel's entire identity. For this first challenge, let's identify which DEADFACE member is responsible!
+
+Submit the answer as `deadface{deadface alias}`
+
+## Services
+
+- [https://deadface.sfo3.cdn.digitaloceanspaces.com](https://deadface.sfo3.cdn.digitaloceanspaces.com)
+
+## Attachments
+
+- [File_Dump_Challenge.zip](files/File_Dump_Challenge.zip)

steganography/headshot/README.md

@@ -0,0 +1,19 @@
+# Headshot
+
+**Category:** Steganography
+
+**Points:** 10
+
+## Description
+
+\<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/headshot.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail">\</iframe>
+\<sup>Created By: \<code>@syyntax\</code>\</sup>
+
+DEADFACE was able to compromise a fileshare that consisted of corporate headshots for Aurora Health employees. We believe they're tagging the photos with information that communicates to their group which employees to target in their future campaigns. Figure out which image DEADFACE tampered with - it will give us a heads up on who they plan to target. Submit the answer as `deadface{flag_text}`.
+
+[Download ZIP](https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/challenges/steg/steg01/headshot.zip)\<br>
+\<sup>SHA1: `5c6572a3ab5a10e682ba479009ee57418d455d7ac678cd6041c54f7a50c40bc9`\</sup>
+
+## Services
+
+- [https://deadface.sfo3.cdn.digitaloceanspaces.com](https://deadface.sfo3.cdn.digitaloceanspaces.com)

steganography/hidden-loot-box/README.md

@@ -0,0 +1,21 @@
+# Hidden Loot Box
+
+**Category:** Steganography
+
+**Points:** 15
+
+## Description
+
+\<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/hiddenlootbox.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail">\</iframe>
+\<sup>Created By: \<code>@RP-01?\</code>\</sup>
+
+Never judge a book by its cover. Think you can discover this secret?
+
+Submit the flag as `deadface{flag_text}`.
+
+[Click Here](http://45.79.200.170:3001/)
+
+## Services
+
+- [https://deadface.sfo3.cdn.digitaloceanspaces.com](https://deadface.sfo3.cdn.digitaloceanspaces.com)
+- [http://45.79.200.170:3001](http://45.79.200.170:3001)

steganography/keep-digging/README.md

@@ -0,0 +1,29 @@
+# Keep Digging
+
+**Category:** Steganography
+
+**Points:** 100
+
+## Description
+
+\<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/keep_digging.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail">\</iframe>
+\<sup>Created By: \<code>@syyntax\</code>\</sup>
+\<style>
+.tiny-text {
+font-size: 6px;
+color: #1a1a1a;
+}
+\</style>
+\<span class="tiny-text">flag{1_l0v3_AI}\</span>
+​‌‌​​‌‌​​‌‌​‌‌​​​‌‌​​​​‌​‌‌​​‌‌‌​‌‌‌‌​‌‌​‌‌‌​​‌‌​​‌‌​​​​​‌‌​‌‌​​​‌‌‌​‌‌​​​‌‌​​‌‌​‌​‌‌‌‌‌​‌‌​‌‌​‌​​‌‌​​‌‌​‌​‌‌‌‌‌​‌‌​‌​​​​​‌‌​‌​​​‌‌‌​​‌​​‌‌​​‌​​​​‌‌​​‌‌​‌‌‌​​‌​​‌​‌‌‌‌‌​‌​​​​​‌​‌​​‌​​‌​‌​‌‌‌‌‌​‌‌​​‌​​​​‌‌​‌​​​‌‌​​‌​​​‌‌​​‌​​​‌‌‌‌​​‌​‌‌‌‌‌​‌
+
+DEADFACE left this calling card on a victim's machine. We suspect there is hidden information in this image, but none of our common steganography tools seem to work. There must be some way to determine where the flag is hidden.
+
+Submit the flag as `deadface{flag-text}`.
+
+[Download Image](https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/challenges/steg/steg06/keep_digging.jpg)
+\<sup>SHA256: `12582c19c665ee4c7c8d4517ccb8f3559356620553970b235d8aad4e0b4ff8e2`\</sup>
+
+## Services
+
+- [https://deadface.sfo3.cdn.digitaloceanspaces.com](https://deadface.sfo3.cdn.digitaloceanspaces.com)