diff --git a/scenarios/ctf/banner_grab_and_run.xml b/scenarios/ctf/banner_grab_and_run.xml
index 7e6c91dad..9e4f5cd85 100644
--- a/scenarios/ctf/banner_grab_and_run.xml
+++ b/scenarios/ctf/banner_grab_and_run.xml
@@ -26,7 +26,7 @@
 
   <system>
     <system_name>desktop</system_name>
-    <base distro="Debian 9" type="desktop" name="KDE"/>
+    <base distro="Debian 12" type="desktop" name="KDE"/>
 
     <input into_datastore="IP_addresses">
       <value>172.16.0.2</value>
@@ -137,6 +137,20 @@
     </utility>
     <utility module_path=".*/handy_cli_tools"/>
     <utility module_path=".*/nmap"/>
+    <utility module_path=".*/cyberchef"/>
+
+<!-- This is a decryption lab so CyberChef is needed -->
+    <utility module_path=".*/iceweasel">
+      <input into="accounts">
+        <datastore>accounts</datastore>
+      </input>
+      <input into="autostart">
+        <value>true</value>
+      </input>
+      <input into="start_page">
+        <value>file:///opt/cyberchef/CyberChef.html</value>
+      </input>
+    </utility>
 
     <vulnerability module_path=".*/ssh_root_login">
       <input into="root_password">
@@ -161,7 +175,7 @@
 
   <system>
     <system_name>secret_journal_server</system_name>
-    <base distro="Debian 9" type="desktop" name="KDE"/>
+    <base distro="Debian 12" type="desktop" name="KDE"/>
 
     <utility module_path=".*/handy_cli_tools"/>
     <utility module_path=".*/nmap"/>