Frequently Asked Questions
The Wh Gym is a CTF platform. Participants solve challenges in various categories to find a hidden string of characters known as the "flag." Submitting the correct flag on the platform awards points.
No, this platform is strictly educational. You cannot win a physical or virtual prize. The only prize is the knowledge you gain in the process.
Since our challenges come from various sources, the flag format may differ. Be sure to check the description of each specific challenge to see the required format.
We use dynamic scoring. This means a challenge starts with a high point value that decreases as more people solve it. This system rewards solving harder tasks that fewer people have cracked.
Snicat is a command-line tool that establishes connections to specific challenges on our platform.
Because challenge instances are behind a proxy for security reasons, direct access via IP is not possible. Neither ssh nor nc works with domain names. Snicat creates a secure tunnel between your local machine and the challenge instance.
You can create a tunnel by running the command provided in the task description (e.g.,
After establishing the tunnel, you can connect to the challenge using localhost and the specified local port (e.g.,
Because challenge instances are behind a proxy for security reasons, direct access via IP is not possible. Neither ssh nor nc works with domain names. Snicat creates a secure tunnel between your local machine and the challenge instance.
You can create a tunnel by running the command provided in the task description (e.g.,
sc -b <local_port> <host> <port>). You can download the tool here.After establishing the tunnel, you can connect to the challenge using localhost and the specified local port (e.g.,
nc localhost <local_port>).
To save resources, challenges shut down after one hour of inactivity. You can extend the expiration time in the specific challenge panel.
This is intentional. The challenge environments are isolated and do not have internet access. You cannot download files to the server or connect to external sites within the challenge instance.
First, make sure there are no unnecessary spaces in the flag string. Then, verify that the flag format matches the one in the challenge description.
If you have double-checked everything and are still having trouble, you can contact the administrators on our Discord server.
If you have double-checked everything and are still having trouble, you can contact the administrators on our Discord server.