Create a free account to save progress, earn certificates, and join the community.

Practice

Labs, simulations & CTF

Learn a technique in a guided lab, work a full incident in a simulation, or prove it with no hints in a CTF.

No hints, no walkthrough. Capture the flag, earn XP, climb the leaderboard.

🎯

CTF Challenges

And growing

👥

156

Players

Have solved ≥1

🚩

2,321

Flags Captured

Across all players

🔥

—

Your XP

Difficulty

Hints

Category

CTFVery Easy
Secret Admin Panel
Capture the flag · 8 min
126 solved100 XPStart →
CTFVery Easy
HTTP Headers
Capture the flag · 6 min
100 solved50 XPStart →
CTFVery Easy
Developer Notes
Capture the flag · 5 min
99 solved50 XPStart →
CTFVery Easy
Cookie Monster
Capture the flag · 8 min
92 solved100 XPStart →
CTFEasy
VaultSync — Recon Shell
Capture the flag · 30 min
72 solved400 XPStart →
CTFEasy
Mail Forensics — Header Hunt
Capture the flag · 10 min
71 solved250 XPStart →
CTFEasy
Single-byte XOR
Capture the flag · 12 min
66 solved200 XPStart →
CTFEasy
Vigenère
Capture the flag · 12 min
62 solved250 XPStart →
CTFEasy
ShopBot — Prompt Injection 101
Capture the flag · 10 min
27 solved300 XPStart →
CTFEasy
Stego Image
Capture the flag · 12 min
56 solved100 XPStart →
CTFEasy
Simple Cipher
Capture the flag · 8 min
58 solved100 XPStart →
CTFEasy
Robots Explorer
Capture the flag · 10 min
70 solved100 XPStart →
CTFEasy
Search Challenge
Capture the flag · 15 min
54 solved200 XPStart →
CTFEasy
README Leak
Capture the flag · 8 min
57 solved100 XPStart →
CTFEasy
Metadata Hunter
Capture the flag · 15 min
53 solved200 XPStart →
CTFEasy
Log Explorer
Capture the flag · 8 min
50 solved100 XPStart →
CTFEasy
JWT Explorer
Capture the flag · 10 min
53 solved100 XPStart →
CTFEasy
Hidden Sitemap
Capture the flag · 8 min
54 solved100 XPStart →
CTFEasy
Git History
Capture the flag · 15 min
46 solved100 XPStart →
CTFEasy
Forgotten Backup
Capture the flag · 12 min
48 solved120 XPStart →
CTFEasy
Employee Directory
Capture the flag · 12 min
46 solved150 XPStart →
CTFEasy
NimbusPay — SQL Injection Auth Bypass
Capture the flag · 20 min
43 solved100 XPStart →
CTFEasy
HelpHub — IDOR / Broken Access Control
Capture the flag · 20 min
49 solved120 XPStart →
CTFMedium
SUID Treasure Hunt
Capture the flag · 35 min
43 solved900 XPStart →
CTFMedium
Session Fixation
Capture the flag · 30 min
28 solved700 XPStart →
CTFMedium
PCAP Investigation
Capture the flag · 35 min
40 solved800 XPStart →
CTFMedium
CORS Misconfiguration
Capture the flag · 35 min
39 solved800 XPStart →
CTFMedium
Browser History Forensics
Capture the flag · 30 min
39 solved800 XPStart →
CTFMedium
Bytecode — License Validator
Capture the flag · 20 min
23 solved400 XPStart →
CTFMedium
NetTrace — PCAP Credentials
Capture the flag · 15 min
35 solved350 XPStart →
CTFMedium
MemScope — Memory Dump
Capture the flag · 12 min
31 solved350 XPStart →
CTFMedium
RSA — Low Exponent
Capture the flag · 20 min
31 solved400 XPStart →
CTFMedium
NimbusOps — Kill Chain (multi-flag)
Capture the flag · 25 min
30 solved800 XPStart →
CTFMedium
Helios — System Prompt Extraction
Capture the flag · 15 min
9 solved400 XPStart →
CTFMedium
TownWall — Stored XSS
Capture the flag · 20 min
31 solved350 XPStart →
CTFMedium
PixelSearch — Reflected XSS (filter bypass)
Capture the flag · 20 min
29 solved300 XPStart →
CTFMedium
DocVault — Directory Traversal
Capture the flag · 20 min
23 solved350 XPStart →
CTFMedium
Meridian Admin — JWT alg:none
Capture the flag · 25 min
16 solved450 XPStart →
CTFMedium
Ledgerly API — Broken Object Authorization
Capture the flag · 20 min
14 solved500 XPStart →
CTFMedium
GreetGen — Server-Side Template Injection
Capture the flag · 35 min
22 solved220 XPStart →
CTFMedium
NetDiag — OS Command Injection
Capture the flag · 30 min
27 solved200 XPStart →
CTFHard
Race Condition Wallet
Capture the flag · 45 min
22 solved1500 XPStart →
CTFHard
Password Reset Poisoning
Capture the flag · 45 min
13 solved1200 XPStart →
CTFHard
Kerberoast Lab
Capture the flag · 60 min
8 solved2500 XPStart →
CTFHard
IAM Privilege Escalation
Capture the flag · 45 min
13 solved2000 XPStart →
CTFHard
GTFOBins Escape
Capture the flag · 40 min
25 solved1500 XPStart →
CTFHard
BloodHound Path
Capture the flag · 45 min
15 solved2000 XPStart →
CTFHard
Kubernetes Nightmare — Cluster Audit
Capture the flag · 40 min
21 solved3500 XPStart →
CTFHard
Ghost Protocol — Active Directory Audit
Capture the flag · 60 min
17 solved2500 XPStart →
CTFHard
Cloud Apocalypse — AWS Audit
Capture the flag · 45 min
15 solved900 XPStart →
CTFHard
Crackme — Password Check
Capture the flag · 40 min
9 solved700 XPStart →
CTFHard
Vault — Guardrail Bypass
Capture the flag · 25 min
2 solved600 XPStart →
CTFHard
PrivEsc Audit — Find the Root Path
Capture the flag · 25 min
19 solved800 XPStart →
CTFHard
Docker Escape Audit — Spot the Misconfig
Capture the flag · 25 min
17 solved900 XPStart →
CTFHard
BillFlow — XXE Invoice Importer
Capture the flag · 30 min
13 solved700 XPStart →
CTFHard
ShopEasy — Business Logic Flaw
Capture the flag · 25 min
13 solved600 XPStart →
CTFInsane
Project Chimera
Capture the flag · 180 min
16 solved15000 XPStart →
CTFInsane
Codelivly Grand Finale
Capture the flag · 300 min
15 solved25000 XPStart →
CTFInsane
Ghost Network
Capture the flag · 120 min
16 solved9000 XPStart →
CTFInsane
Bank Heist
Capture the flag · 120 min
9 solved8000 XPStart →
CTFInsane
MegaCorp SOC Investigation
Capture the flag · 120 min
21 solved6000 XPStart →
CTFInsane
Red vs Blue
Capture the flag · 120 min
25 solved6000 XPStart →
CTFInsane
Nation-State Attack Simulation
Capture the flag · 180 min
26 solved10000 XPStart →
CTFInsane
BlackVault Banking
Capture the flag · 90 min
9 solved5000 XPStart →

Secret Admin Panel

HTTP Headers

Developer Notes

Cookie Monster

VaultSync — Recon Shell

Mail Forensics — Header Hunt

Single-byte XOR

Vigenère

ShopBot — Prompt Injection 101

Stego Image

Simple Cipher

Robots Explorer

Search Challenge

README Leak

Metadata Hunter

Log Explorer

JWT Explorer

Hidden Sitemap

Git History

Forgotten Backup

Employee Directory

NimbusPay — SQL Injection Auth Bypass

HelpHub — IDOR / Broken Access Control

SUID Treasure Hunt

Session Fixation

PCAP Investigation

CORS Misconfiguration

Browser History Forensics

Bytecode — License Validator

NetTrace — PCAP Credentials

MemScope — Memory Dump

RSA — Low Exponent

NimbusOps — Kill Chain (multi-flag)

Helios — System Prompt Extraction

TownWall — Stored XSS

PixelSearch — Reflected XSS (filter bypass)

DocVault — Directory Traversal

Meridian Admin — JWT alg:none

Ledgerly API — Broken Object Authorization

GreetGen — Server-Side Template Injection

NetDiag — OS Command Injection

Race Condition Wallet

Password Reset Poisoning

Kerberoast Lab

IAM Privilege Escalation

GTFOBins Escape

BloodHound Path

Kubernetes Nightmare — Cluster Audit

Ghost Protocol — Active Directory Audit

Cloud Apocalypse — AWS Audit

Crackme — Password Check

Vault — Guardrail Bypass

PrivEsc Audit — Find the Root Path

Docker Escape Audit — Spot the Misconfig

BillFlow — XXE Invoice Importer

ShopEasy — Business Logic Flaw

Project Chimera

Codelivly Grand Finale

Ghost Network

Bank Heist

MegaCorp SOC Investigation

Red vs Blue

Nation-State Attack Simulation

BlackVault Banking