Challenge list

05. HTML Source Code Secret

Web pages contain a lot of information that isn't visible on the surface. Looking at HTML source code, you can often…

06. JavaScript Password Check

This page has a password-protected area. However, because the password check is done in JavaScript, you can find the…

07. Peek at Cookies

Websites use a mechanism called cookies to store information in your browser. They're used for managing login states,…

Network SecurityLevel 1★☆☆☆☆

08. Network Basics - Learn Port Numbers

Networks use port numbers to identify services. For example, a web server (HTTP) usually uses port 80, and encrypted…

10 ptsOpen challenge

General SkillsLevel 1★☆☆☆☆

10. Security Basics - Ethics and Rules

To become a white hat hacker, knowledge of ethics and laws is just as important as technical skills. In this…

SQL Injection 101

This login form has an SQL Injection vulnerability. Log in as admin without proper credentials and retrieve the flag.

45 ptsOpen challenge

Web-04. The robots.txt Trap

Websites often serve a robots.txt file for crawlers. In this challenge, check whether a file that robots.txt tells…

Web-05. Directory Listing Trap

When an Nginx server has directory index listing (autoindex) enabled, anyone can browse the full file listing of a…

Web-06. Forging HTTP Headers

This application grants access based on the value of a specific HTTP header. Even values the browser never sends by…

Web-07. Tampering with URL Parameters

This web application checks the value of the GET parameter key on the server side. The required parameter name and…

Web-08. Tampering with POST Data

The login form contains a hidden input field that is invisible in the rendered page. Inspect it with developer tools…

Web-09. The Weak Basic Auth Trap

A protected area is guarded by HTTP Basic Authentication, but the developer accidentally left the credentials in an…

Web-10. Peeking Behind a Redirect

Accessing a certain page immediately redirects you elsewhere. Browsers automatically follow redirects, so think about…

XSS Basics - Guestbook

This web application has a basic XSS vulnerability. Find where input is reflected in the guestbook. The flag is at an…

35 ptsOpen challenge

Bash Scripting - Power of Automation

/app/numbers.txt contains numbers from 1 to 1000, one per line. Extract all numbers that satisfy these conditions and…

100 ptsOpen challenge

Git Detective - Lost Commit

/app/repo is a Git repository. A developer accidentally deleted a commit containing important information. Use git…

100 ptsOpen challenge

JSON Master - Data Extraction

/app/users.json contains information of 100 users in JSON format. Extract users that meet these conditions: - age…

100 ptsOpen challenge

OSINT Basics - Metadata Analysis

Files recovered from a departed employee's shared drive (photos `IMG_*.jpg` and Office documents) are in…

150 ptsOpen challenge

Web-11. SQL Injection into the Employee Portal

KinoGadget's internal "Employee Access Portal" runs on a legacy authentication system. The lead developer is rumored…

55 ptsOpen challenge

Web-12. Reflected XSS in BlogSearch

BlogSearch is a simple search engine for blog articles. The search query is embedded into the results page as-is…

40 ptsOpen challenge

Web-13. Bypassing File Upload Checks in ImageVault

ImageVault is an image hosting service that accepts JPG, PNG, and GIF uploads. If its validation only checks the end…

50 ptsOpen challenge

Web-14. Command Injection in a Network Diagnostic Tool

This app is a diagnostic tool that runs ping against a host you supply. If the host input is passed straight into a…

55 ptsOpen challenge