| Day | Challenge | Category |
|---|---|---|
| 1 | Secure Bank | OSINT |
| 2 | Sleigh redirects | HTTP + programming |
| 3 | Secret message | password cracking |
| 4 | Lorem Ipsum | forensics (pdf) |
| 5 | Elfs program | reverse engineering (.NET) |
| 6 | x.owasp.si | cloud (AWS S3) |
| 7 | Letter to Santa | cryptography |
| 8 | Tech-savvy kid | forensics (text) |
| 9 | Icevault | reverse engineering (android) |
| 10 | Present | JS deobfuscation + cryptography |
| 11 | y.owasp.si | cloud (AWS Lambda) |
| 12 | Light show | reverse engineering |
| 13 | Weird transmissions | forensics (network) |
| 14 | Naughty and nice list | HTTP + cryptography (AES) |
| 15 | Santa Claus | steganography (SVG) |
| 16 | Send a letter | web (XXE) |
| 17 | Best of jokes | binary exploitation (pwn) |
| 18 | Santa's Authenticator | reverse engineering (android) |
| 19 | Reindeer Tracker 5000 | reverse engineering (.NET) |
| 20 | SharePoint | cloud (SharePoint) |
| 21 | Gravity Falls | web |
| 22 | Baby Format | binary exploitation (pwn) |
| 23 | Keygen to the Kingdom | reverse engineering (c) |
| 24 | Santa's Web Challenge | web |