Challenge list

05. HTML Source Code Secret

Web pages contain a lot of information that isn't visible on the surface. Looking at HTML source code, you can often…

06. JavaScript Password Check

This page has a password-protected area. However, because the password check is done in JavaScript, you can find the…

07. Peek at Cookies

Websites use a mechanism called cookies to store information in your browser. They're used for managing login states,…

CryptographyLevel 1★☆☆☆☆

11. Decode the Caesar Cipher

The Caesar cipher is one of the oldest classical ciphers used by Julius Caesar. It encrypts by shifting alphabet…

CryptographyLevel 1★☆☆☆☆

14. ROT13 Magic

ROT13 (Rotate 13) is a type of Caesar cipher that shifts the alphabet by 13 letters. Interesting feature of ROT13:…

SQL Injection 101

This login form has an SQL Injection vulnerability. Log in as admin without proper credentials and retrieve the flag.

45 ptsOpen challenge

Web-04. The robots.txt Trap

Websites often serve a robots.txt file for crawlers. In this challenge, check whether a file that robots.txt tells…

Web-05. Directory Listing Trap

When an Nginx server has directory index listing (autoindex) enabled, anyone can browse the full file listing of a…

Web-06. Forging HTTP Headers

This application grants access based on the value of a specific HTTP header. Even values the browser never sends by…

Web-07. Tampering with URL Parameters

This web application checks the value of the GET parameter key on the server side. The required parameter name and…

Web-08. Tampering with POST Data

The login form contains a hidden input field that is invisible in the rendered page. Inspect it with developer tools…

Web-09. The Weak Basic Auth Trap

A protected area is guarded by HTTP Basic Authentication, but the developer accidentally left the credentials in an…

Web-10. Peeking Behind a Redirect

Accessing a certain page immediately redirects you elsewhere. Browsers automatically follow redirects, so think about…

XSS Basics - Guestbook

This web application has a basic XSS vulnerability. Find where input is reflected in the guestbook. The flag is at an…

35 ptsOpen challenge

CryptographyLevel 2★★☆☆☆

AES-ECB Mode Weakness

ECB leaks repeated block patterns. This introductory task first checks the difference between encryption and encoding.…

65 ptsOpen challenge

CryptographyLevel 2★★☆☆☆

RC4 Stream Cipher Weakness

RC4 was once widely used but is now deprecated. This introductory task focuses on recognizing the provided data…

75 ptsOpen challenge

CryptographyLevel 2★★☆☆☆

Vigenere Cipher Decryption

Decrypt a Vigenere cipher when the key length is known and retrieve the flag. Ciphertext:…

50 ptsOpen challenge

Web-11. SQL Injection into the Employee Portal

KinoGadget's internal "Employee Access Portal" runs on a legacy authentication system. The lead developer is rumored…

55 ptsOpen challenge

Web-12. Reflected XSS in BlogSearch

BlogSearch is a simple search engine for blog articles. The search query is embedded into the results page as-is…

40 ptsOpen challenge

Web-13. Bypassing File Upload Checks in ImageVault

ImageVault is an image hosting service that accepts JPG, PNG, and GIF uploads. If its validation only checks the end…

50 ptsOpen challenge

Web-14. Command Injection in a Network Diagnostic Tool

This app is a diagnostic tool that runs ping against a host you supply. If the host input is passed straight into a…

55 ptsOpen challenge

Web-15. IDOR in the UserProfile Service

The UserProfile Service exposes an API that returns profile information for a given user ID. Check whether the service…

50 ptsOpen challenge