diff --git a/scenarios/ctf/ff_decode_me.xml b/scenarios/ctf/ff_decode_me.xml
index f71c13862..bcd228eb8 100644
--- a/scenarios/ctf/ff_decode_me.xml
+++ b/scenarios/ctf/ff_decode_me.xml
@@ -41,12 +41,18 @@
       </input>
     </utility>
 
+<!-- This is a decryption lab so CyberChef is needed -->
+    <utility module_path=".*/cyberchef"/>
+
     <utility module_path=".*/iceweasel">
       <input into="accounts">
         <value>{"username":"kali","password":"kali","super_user":"true","strings_to_leak":[],"leaked_filenames":[]}</value>
       </input>
       <input into="autostart">
-        <value>false</value>
+        <value>true</value>
+      </input>
+      <input into="start_page">
+        <value>file:///opt/cyberchef/CyberChef.html</value>
       </input>
     </utility>
 
@@ -71,7 +77,7 @@
   <!--some basic decoding challenges-->
   <system>
     <system_name>decode_me</system_name>
-    <base distro="Debian 10" type="desktop" name="KDE"/>
+    <base distro="Debian 12" type="desktop" name="KDE"/>
 
     <!-- comment describes using pseudo code (C#-like methods with named optional arguments) -->
     <!-- vulnerability_nfs_share_leak(strings_to_leak: encoder_flag_generator() CONCAT encoder_ascii_reversible(strings_to_encode: encoder_flag_generator()) CONCAT ...) -->