1
Find the flag
Each challenge hides a flag that looks like NOC{something_1a2b3c4d}. Your crew gets its own flags, so copying a neighbour's flag does not work.
Night of Chances workshop
Break into
Pressburg
Reserve Bank tonight.
Bank Heist is a capture the flag game about web security. You will read page source, tamper with cookies, inject SQL and finish with hand-crafted curl requests. Every flag your crew captures adds stolen money to its card on the big screen.
15challenges per crew
45minutes of play
0crews registered
Assemble your crew
A crew is one or two players sharing a laptop. You pick your archetype once, so choose the heist you want to pull.
Already registered? Sign in with your crew code.
01How the heist works
Five tiers stand between
you and the vault.
The first challenges need only your browser. The last ones need curl in a terminal, and the server's error messages tell you what it expects. Facilitators demo each new tool on the projector.
2
Submit it on your profile
Paste the flag into the challenge card. Solving two challenges in a tier opens the next tier, and at minute 35 every tier opens for everyone.
3
Watch your loot grow
Every point is €1,000 of stolen money. The first crew to crack a challenge earns 10 % extra, and each hint you open lowers that challenge's value.
House rules. Attack only the Pressburg Reserve Bank sites under
prb.goit.sk, which your profile links to. No challenge needs scanners, brute force or wordlists, and attacking the game server itself ends the game for your crew. Using these techniques against real systems without permission is a crime, so keep it inside the workshop.