Flare-On is a reverse engineering-based CTF organized by the FireEye Labs Advanced Reverse Engineering (FLARE) team. It began in 2014 and has been held annually ever since. This repository aims to compile all Flare-On challenge binaries and write-ups, allowing both you and me to review and study them to enhance our reverse engineering skills.

The binaries are compressed using 7-Zip or ZIP, except for those from the 2016 and 2017 challenges. Passwords for the compressed files are provided in .txt files. Typically, the passwords are either flare, malware, or infected or no password at all.

Available Binaries and Write-ups: 2014 - 2024

Flare-On Binaries

• 2014 (Flare-On 1)
• 2015 (Flare-On 2)
• 2016 (Flare-On 3)
• 2017 (Flare-On 4)
• 2018 (Flare-On 5)
• 2019 (Flare-On 6)
• 2020 (Flare-On 7)
• 2021 (Flare-On 8)
• 2022 (Flare-On 9)
• 2023 (Flare-On 10)
• 2024 (Flare-On 11)

Flare-On Writeups

2014

• https://www.aldeid.com/wiki/The-FLARE-On-Challenge-01
• https://parsiya.net/blog/2014-09-23-my-adventure-with-fireeye-flare-challenge/#ch1
• http://www.ghettoforensics.com/2014/09/a-walkthrough-for-flare-re-challenges.html
• http://web.archive.org/web/20200814180756/http://codeandsec.com/Detailed-Solutions-to-FireEye-FLARE-Challenge
• https://www.fireeye.com/blog/threat-research/2014/11/the_flare_on_challen.html

2015

• In Write-ups/2015 directory (FireEye's official write-up)
• http://bytepointer.com/articles/flare2015/index.htm
• https://www.aldeid.com/wiki/The-FLARE-On-Challenge-2015
• http://www.ghettoforensics.com/2015/09/solving-2015-flare-on-challenges.html
• https://secwriteups.blogspot.com/2016/08/

2016

• In Write-ups/2016 directory (FireEye's official write-up)
• https://0xec.blogspot.com/2016/11/flare-on-challenge-2016-write-up.html
• http://mislusnys.github.io/post/flareon3/

2017

• In Write-ups/2017 directory (FireEye's official write-up)
• https://lifeinhex.com/about-flare-2017/
• https://blog.attify.com/

2018

• In Write-ups/2018 directory (FireEye's official write-up)
• https://blog.attify.com/
• https://0x00sec.org/t/writeup-flare-on-2018/10502
• https://bruce30262.github.io/flare-on-challenge-2018-write-up/
• https://medium.com/@mathmare/write-up-to-the-2018-flare-on-challenge-infosec-newbie-edition-flareon5-6444431444b4
• https://www.mavjs.org/post/flareon5-writeup/

2019

• In Write-ups/2019 directory (FireEye's official write-up)
• https://blog.attify.com/
• https://malwareunicorn.org/workshops/flareon6_2019.html#12
• https://bruce30262.github.io/flare-on-challenge-2019-write-up/
• https://washi1337.github.io/ctf-writeups/writeups/flare-on/2019/

2020

• In Write-ups/2020 directory (FireEye's official write-up)
• https://medium.com/insomniacs/journal-flareon7-part-1-ca675815f204
• https://medium.com/insomniacs/journal-flareon7-part-2-88baa92ffc9b
• https://github.com/aleeamini/Flareon7-2020
• https://github.com/LeoCodes21/ctf-writeups/tree/main/Flare-On%202020
• https://explained.re/posts/flare-on-7-write-up-of-all-write-ups/
• https://washi1337.github.io/ctf-writeups/writeups/flare-on/2020/

2021

• In Write-ups/2021 directory (FireEye's official write-up)
• https://rainbowpigeon.me/tags/flare-on/
• https://0xdf.gitlab.io/flare-on-2021/credchecker
• https://www.mustafadur.com/blog/flareon-2021-08/
• https://washi1337.github.io/ctf-writeups/writeups/flare-on/2021/

2022

• https://www.mandiant.com/resources/blog/flareon9-challenge-solutions
• https://www.elastic.co/flare-on-9-solutions-burning-down-the-house
• https://oalieno.github.io/2022/11/12/flare-on-9/zh-tw/
• https://shellcromancer.io/posts/flare-on-9/
• https://github.com/lkmidas/Short-CTF-Writeups/tree/master/2022/flareon2022
• https://hshrzd.wordpress.com/tag/flareon9/
• https://blog.bollos.nl/posts/flare-on-9/
• https://re-dojo.github.io/post/2022-11-13-FlareOn-9-part-1/
• https://washi1337.github.io/ctf-writeups/writeups/flare-on/2022/

2023

• https://cloud.google.com/blog/topics/threat-intelligence/flareon10-challenge-solutions/
• https://github.com/omr00t/flareon10_solutions
• https://joostrijneveld.nl/posts/2023-11-13-write-ups-for-flare-on-10/
• https://www.youtube.com/watch?v=wpHMVMkcvpI
• https://www.digitalwhisper.co.il/files/Zines/0x9D/DW157-1-Fl4reOn2023.pdf
• https://github.com/hasherezade/flareon2023

2024

• https://cloud.google.com/blog/topics/threat-intelligence/flareon-11-challenge-solutions
• https://0xdf.gitlab.io/flare-on-2024/frog
• https://blog.washi.dev/posts/flareon11/
• https://washi1337.github.io/ctf-writeups/writeups/flare-on/2024/
• https://github.com/hasherezade/flareon2024
• https://www.youtube.com/playlist?list=PLYP-7_bD0kQEJ51srPqQY7QUc2VNYN8uN
• https://hackmd.io/@huydeptrainhatvinhbacbo/flareon2024
• https://vaktibabat.github.io/posts/flareon2024/
• https://eversinc33.com/posts/flareon11.html
• https://sec.vnpt.vn/2024/11/flareon-11-writeup-part-1
• https://gmo-cybersecurity.com/blog/flare-on-11-write-up/