Skip to content

Welcome⚓︎

Group photo

Introduction⚓︎

The SANS Holiday Hack Challenge is a free cybersecurity event I look forward to every year. It's fun, challenging, and consistently pushes me to learn concepts well outside my comfort zone.

This write-up captures how I approached each challenge, the mistakes along the way, and the reasoning behind the solutions. It's not the only way to solve them—just the one that worked for me.

My now 11 year old son Aarush, has been into the Holiday Hack Challenge since HHC 2020, and it's since become one of the most anticipated events of the year for both of us.

Background⚓︎

Frosty planned to refrigerate the entire neighborhood by using gnomes to collect coolant and refrigerator parts.
This write-up shows how we uncovered and stopped that plan by solving the challenges.

All Answers⚓︎

The challenges are grouped into Act 1, Act 2, and Act 3.
Each challenge includes a star rating, where a higher number of solid stars indicates greater difficulty.
Click on each act to view the challenges and detailed solutions.

Its All About Defang -

Solved in the game.

Neighborhood Watch Bypass -

Solved in the game.

Santa's Gift-Tracking Service Port Mystery -

Solved in the game.

Visual Networking Thinger -

Solved in the game.

Visual Firewall Thinger -

Solved in the game.

Intro to Nmap -

Solved in the game.

Blob Storage Challenge in the Neighborhood -

Solved in the game.

Spare Key -

Solved in the game.

The Open Door -

Solved in the game.

IDORable Bistro -

Bartholomew Quibblefrost.

Dosis Network Down -

SprinklesAndPackets2025!.

Rogue Gnome Identity Provider -

SprinklesAndPackets2025!.

Gnome Tea -

GigGigglesGiggler.

Snowcat RCE & Priv Esc -

8ade723d-9968-45c9-9c33-7606c49c2201.

Schrodingers Scope -

Solved in the game.

On-the-Wire -

32.84.

Conclusion⚓︎

Narrative

Frosty's plan was to turn the entire Dosis neighborhood into a giant refrigerator. To do this, he enlisted the gnomes to gather coolant, refrigeration components, and anything else required to bring the plan to life.

By uncovering clues, solving each challenge, and piecing together how everything fit, we were ultimately able to uncover and foil his scheme before the neighborhood was left permanently frozen.

  • ACT I
    The Counter Hack crew is in the Neighborhood festively preparing for the holidays when they are suddenly overrun by lively Gnomes in Your Home! There must have been some magic in those Gnomes, because, due to some unseen spark, some haunting hocus pocus, they have come to life and are now scurrying around the Neighborhood.

  • ACT II
    The Gnomes' nefarious plot seems to involve stealing refrigerator parts. But why?

  • ACT III
    The Gnomes want to transform the neighborhood so that it's frozen solid year-round, an environmental disaster. But who is the mastermind behind the Gnomes' wickedness? The Counter Hack crew discovers Frosty is behind the Gnome uprising and stops his freezing plot! Santa's compassionate offer to Frosty melts more than just snow, it melts hearts, saving the Neighborhood and proving that kindness conquers all.

Santa

Magnificent work, my friends! You've saved the Dosis Neighborhood from an eternal winter and stopped those mischievous Gnomes from causing any more trouble.

But Frosty... oh, Frosty. I understand your fear of melting, truly I do. The pain of fading away each spring, knowing you'll disappear until the next winter snow falls - that must be terribly lonely.

If only you had come to me! The North Pole never melts, Frosty. The snow is eternal there, the cold is constant. You could have lived with us year-round, never worrying about spring's warm sun again.

There's always been a place for you at the North Pole, my friend. You never had to resort to all this - the Gnomes, the refrigerator parts, the coolants, trying to freeze an entire neighborhood. All you had to do was ask.

The invitation still stands, Frosty. Come home with me to the North Pole. You'll never melt again, and we could always use another jolly soul spreading winter cheer.

What do you say, my friend?

Ho! Ho! Ho!

Group photo

My son Aarush navigating through the maze. :-)
Group photo