🕸️ WebCTF — SecurinetsENIT

My contribution to the members-only SecurinetsENIT Web CTF, held on 13–14 December 2025.
Authors : ASSADA x h1dr1

🩷 Writeups are live on my Blog: Writeups

Challenges Overview

Series	Theme	Challenges	Stack
🐙 GutHib	Git cloning service	4	PHP
👥 Inhuman Resources	Corporate HR system	3	Python / Flask / SQLite
🤖 SuSGPT	AI chat interface	3	PHP

📦 Challenge Categories

🐙 GutHib — 4 Levels

A service that clones Git repositories. What could possibly go wrong? Each level introduces a new twist.

GutHib/
├── GutHib1/
├── GutHib2/
├── GutHib3/
└── GutHib4/

👥 Inhuman Resources — 3 Levels

Eve, head of development, had a falling out with HR and quit, but not before leaving something behind. Navigate a corporate HR management system and uncover what she left. Each level raises the bar on how input is handled and validated.

Inhuman_Resources/
├── Inhuman_Resources1/
├── Inhuman_Resources2/
└── Inhuman_Resources3/

🤖 SuSGPT — 3 Levels

Meet SuSGPT: a suspiciously familiar AI chat interface that accepts file uploads. Things are not always what they seem. Three levels, three layers of (mis)trust.

SuSGPT/
├── SuSGPT1/
├── SuSGPT2/
└── SuSGPT3/

🗂️ Repository Structure

WebCTF_SecurinetsENIT/
│
├── GutHib/
│   ├── GutHib1/
│   ├── GutHib2/
│   ├── GutHib3/
│   └── GutHib4/
│
├── Inhuman_Resources/
│   ├── Inhuman_Resources1/
│   ├── Inhuman_Resources2/
│   └── Inhuman_Resources3/
│
└── SuSGPT/
    ├── SuSGPT1/
    ├── SuSGPT2/
    └── SuSGPT3/

Each challenge folder contains:

• Source code
• Challenge brief : a .txt file with the challenge name, flavor text, and scenario setup

🛠️ Tech Stack

Series	Language	Framework	Database
GutHib		—	—
Inhuman Resources
SuSGPT		—	—

▶️ How to Run a Challenge

Each challenge is self-contained and can be spun up locally.

PHP challenges — GutHib & SuSGPT:

cd GutHib/GutHib1/src
php -S localhost:8080

Python / Flask challenges — Inhuman Resources:

cd Inhuman_Resources/Inhuman_Resources1
pip install flask
python app.py

🏁 Flag Format and Player Progression

All flags follow the format:

SecurinetsENIT{...}

---

👥 About

SecurinetsENIT is the cybersecurity club of the
National Engineering School of Tunis (ENIT).