π Download the challenge file.
Description: The numbers⦠what do they mean?
Difficulty: Medium
Author: Danny
Summary
This challenge provides an image containing a sequence of numbers.
The goal is to decode the numbers inside the braces using the Letter-to-Number Cipher to recover the flag.
Analysis
We are provided with the image the_numbers.png. On this it contains this 16 9 3 15 3 20 6 {20 8 5 14 21 13 2 5 18 19 13 1 19 15 14}
To identify the cipher method, we can use dcode.fr.

It suggests that the sequence uses a Letter-to-Number Cipher.
What is Letter-to-Number Cipher? Also known as the Number-to-Letter Cipher or A1Z26, this cipher replaces each letter with its position in the alphabet:
| Letter | A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Number | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 |
How to Encrypt Using A1Z26
- Take the plaintext letter.
- Find its position in the alphabet.
- Replace the letter with its corresponding number.
For example, βAβ becomes 1, βBβ becomes 2, and so on up to βZβ = 26.
Decoding is simply the reverse process: convert numbers back into letters to recover the original text.
Now letβs decrypt our flag:
Split into the part before the braces and the part inside:
- Before braces:
16 9 3 15 3 20 6 - Inside braces:
20 8 5 14 21 13 2 5 18 19 13 1 19 15 14
Convert each number using A1Z26 (A=1, B=2, β¦, Z=26):
Before braces
- 16 β P
- 9 β I
- 3 β C
- 15 β O
- 3 β C
- 20 β T
- 6 β F
Assembled: P I C O C T F β PICOCTF
Inside braces
- 20 β T
- 8 β H
- 5 β E
- 14 β N
- 21 β U
- 13 β M
- 2 β B
- 5 β E
- 18 β R
- 19 β S
- 13 β M
- 1 β A
- 19 β S
- 15 β O
- 14 β N
Assembled: T H E N U M B E R S M A S O N β THENUMBERSMASON
Using the standard flag format, the final flag is: PICOCTF{THENUMBERSMASON}
β‘ Raikiriπ Flag pwned! The numeric ciphertext has been decoded successfully.
This can also be solved using online tools like dcode.fr.
π‘ TL;DR / Lesson LearnedNumber-to-Letter (A1Z26) ciphers are simple yet effective for learning about encoding.