All Challenges (241)
I Earn Through App Advertisements
Mission: Identify any abuse case.
Category: Application Security
Domain: Cybersecurity Drills
Bypassing Escape \ | Variant 1
Mission: Achieve script execution upon form submission.
Category: Bypasses In Cross Site Scripting (xss)
Domain: The Web War
Bypassing Escape \ | Variant 2
Mission: Achieve script execution upon form submission.
Category: Bypasses In Cross Site Scripting (xss)
Domain: The Web War
Bypassing Escape \ | Variant 2
Mission: Achieve script execution upon form submission.
Category: Xss/htmli: Universal Browser Edition
Domain: The Web War
Blacklisted Domain Bypass | Variant 2
Mission: Submit equivalence of yehg.net characters bypass filter.
Category: Bypasses In Input Restriction
Domain: The Web War
Blacklisted Domain Bypass | Variant 3
Mission: Submit equivalence of yehg.net characters bypass filter.
Category: Bypasses In Input Restriction
Domain: The Web War
Empty Field Disaster
Mission: Think about consequences of leaving inputs empty, unchecked and unfiltered.
Category: Resilient Code
Domain: Cybersecurity Drills
Bypassing Nac Restriction | Variant 1
Mission: Get the flag data from localhost.
Category: Data Is Golden
Domain: The Web War
Bypassing Nac Restriction | Variant 2
Mission: Get the flag data from Google IP range.
Category: Bypassing Access Control
Domain: The Web War
Your Profile Information | Variant 3
Mission: Find out how your profile data can be stolen from a malicious third-party web site.
Category: Data Is Golden
Domain: The Web War