WOMBAT CTF 3.0 // BSIDES ADELAIDE 2026
SOLDER YOUR BADGE ▸

// POWER-ON SELF TEST

7 SUBSYSTEMS OFFLINE

Falken's carked it again. Each letter of B/SIDES is an LED wired to a dead subsystem. Solve one on this console, work out its 10-bit code, and type it into the badge. Hold down the CTF key to put the badge in CTF mode. Then press the binary keys slowly to input your flag. Press and hold the MODE key to change blinking patterns. Light all the LEDs and gain bragging rights!

// SUBSYSTEM DIAGNOSTICS — 07

B
CHALLENGE B · POWER CORE OFFLINE

Cold-boot the wombat.

Stone cold and stubborn. It boots with an ID and asks for it straight back - in its own tongue. Cold silicon hums -
seven-one-three still sleeping,
speak it back in bits.

CONSOLE READOUT
WOMBAT CTF 3.0  ::  cold boot
CORE ID .... 713   (0x2C9)
FIELD ...... 10 bits 
/
CHALLENGE / · COMMS ARRAY OFFLINE

Untangle the chatter.

The relay's talking, but Falken ran it up and down the fence before it left. Straighten the rails, read the message, key the number it coughs up.

INTERCEPT
WOEC1IROTPRLPOS8YNAYMATCAUDI6EBNBIYEKI
S
CHALLENGE S · RUNE CACHE OFFLINE

Read the old wombat's runes.

Before there was Wombat OS there were wombat runes. Falken carved the unlock into the stave. Sound it out with the runic key, then read the number aloud.

CARVED INTO THE STAVE :: TRANSLITERATE THE RUNES

Transliterate → you'll get three number-words. Read them as digits, then key that number in binary.

I
CHALLENGE I · OPTIC SENSOR OFFLINE

Let the eye focus.

The red eye's trying to scan something it can't quite lock onto. Point your own scanner at it and read what the optic array sees. Red eye can't focus -
hold the square up to the light,
the number swims clear.

OPEN OPTIC SCAN ▸

Scan the QR → it reports the optic unlock. Convert to 10-bit binary.

D
CHALLENGE D · FAB VAULT OFFLINE

Check the blueprints, cobba.

Every board leaves a paper trail. Falken stamped the auth unlock into the fab files and buried it in the silkscreen.

Blueprints

Open the Gerbers in any viewer. Convert to binary.

E
CHALLENGE E · LOGIC ARRAY OFFLINE

Trace the gates.

Ten rungs of logic, and it gets nastier the further down you go. Every rung takes fixed 1s and 0s and spits a single bit at the ?. Work each one out, stack them top to bottom - that's your 10 bits.

& AND≥1 OR=1 XOR▷∘ NOT bubble = inverted (NAND / NOR / XNOR) = 1   = 0
10&?ROW 0110≥1?ROW 0211=1?ROW 0301≥11&?ROW 0411&00=1≥1?ROW 0510=111&?ROW 0610≥101&≥1?ROW 071100=1≥111≥1&?ROW 0810=110≥1&00&≥1?ROW 0910≥101&11&0=1=1?ROW 10out
S
CHALLENGE S · VAULT LOCK OFFLINE

Crack the router's little secret.

Some sparky wired the vault to an old box and left a $9$ secret sitting in the config. That's obfuscation, not encryption - peel it and it'll tell you exactly what it wants.

config fragment
set system login vault secret $9$iHm5n6AOIcjinCtuEhcyreMXaJDiHqKvWLx7dVwY2oGD3n/0BITQRhSyKv4aJZik.P5TQFGU69CA0OLx7NwY

Decode the string → it spells the flag out for you, bits and all.