I use this site a lot just to chill. I sure am glad that the site handles my passwords in “database” safely as well! Table of contents: Web App Authentication Bypass Dumping ...

We got an access to a training resource from WebTopia, where they practise XSS filter bypassing. Enjoy it! Table of contents: Step 1 Step 2 Step 3 Step 4 Step 1 ...

Your trainee made a final commit on the last day of his course, and since then you’ve seen a huge influx of requests. Strangely, you can no longer connect to the server … Can you analyse wh...

Oh, boy… Only Wave 2 and I’m already exhausted. Whatever the issue, I just can’t be bothered to finish putting this challenge together. Here, this what I have so far. Started working on the...

You have been hired by a tech company to assess the security of thier quantum communication system. The system uses the BB84 protocol for key distribution. During your assessment, you’ve in...

Finally, we’ve almost captured all of the secrets on this machine! There is a flag that belongs to the root user. Perhaps there is a way to escalate privileges from lilith to root that will...

DEADFACE has been hacking random people all over town and no one can seem to figure out what they are doing. All we know at this time is that the most recent site that was hit was Otto’s Gr...

This year, America’s politicians are weighing in on the IMPORTANT issues…! As in, which spooky cereal is best? President Donald Trump also has a favorite monster cereal, but it is secured ...

As another test of your programming prowess, Turbo Tactical wants to see if you can write a script to solve mathematic equations being served by a remote server within 3 seconds. Submit th...

DEADFACE extracted a sensitive photo from Lytton Labs. As far as we can tell, it’s just a normal photo of a neighborhood at night, but the man who took the photo insists he saw something el...