CLI-Treasure-HUNT

[PranavMishra17]

AI-orchestrated cybersecurity training through gamified digital forensics challenges

DEMO https://drive.google.com/file/d/1cBiuPqM5CSilEm1r2WHCbGczh7tmaDVa/view?usp=sharing

🎮 Game Architecture

The 5-Step Challenge Structure

Every treasure hunt follows a proven educational progression:

Step	Challenge Type	Skills Developed	Example Techniques
1	Log Analysis	System monitoring, incident response	Timestamp decoding, pattern recognition
2	Data Mining	Business intelligence, fraud detection	JSON parsing, database correlation
3	Image Forensics	Digital evidence, steganography	Metadata extraction, visual analysis
4	Code Archaeology	Software security, reverse engineering	Variable analysis, base64 decoding
5	Network Investigation	Protocol analysis, threat hunting	Header inspection, traffic analysis

Challenge Variability System

Each challenge type includes 6 distinct subtopics for maximum replayability:

🗂️ Log File Challenges (6 subtopics)

• timestamp-encoding - Hide coordinates in Unix timestamps
• log-level-patterns - ERROR-WARN-INFO sequences spell words
• error-steganography - Messages hidden in realistic stack traces
• useragent-morse - Morse code embedded in browser user agent strings
• ip-coordinate-map - IP addresses encode geographic coordinates
• syslog-facility - Syslog facility/severity codes form readable patterns

📊 Vector/Data File Challenges (6 subtopics)

• csv-coordinate-plot - Data points form letters when plotted on graphs
• json-nested-keys - Deeply nested object keys spell out words
• database-fk-relations - Foreign key relationships encode messages
• xml-attribute-cipher - XML attributes contain encoded text
• yaml-structure-map - YAML indentation patterns form readable shapes
• config-comment-acrostic - Configuration file comments form acrostic poems

🖼️ Image/Visual Challenges (6 subtopics)

• exif-gps-hiding - GPS coordinates hidden in image metadata
• ascii-art-logs - Terminal output forms readable letters
• qr-fragmentation - QR codes split across multiple files
• rgb-pixel-encoding - RGB values encode ASCII characters
• file-signature-tricks - Messages hidden in image file headers/footers
• hexdump-patterns - Hex dumps contain readable ASCII patterns

💻 Code/Script Challenges (6 subtopics)

• variable-cryptography - Variable names encode messages
• function-sequences - Function outputs form mathematical sequences
• dependency-spelling - Package names spell out clues
• comment-acrostics - Code comments form acrostic poems
• base64-embedding - Base64 strings hidden in source code
• constant-obfuscation - Obfuscated constants contain coordinates

🌐 Network/Protocol Challenges (6 subtopics)

• dns-record-encoding - DNS TXT records contain encoded messages
• http-header-patterns - Custom HTTP headers spell out clues
• ssl-certificate-subjects - Certificate subject fields contain coordinates
• packet-payload-mock - Simulated packet captures with hidden data
• network-config-hiding - Network configuration comments contain clues
• protocol-timestamp - Protocol-specific timestamp encoding schemes