Daily Hack
A fresh 60-second challenge every day. Solve it, earn XP, and keep your streak alive.
Count the compromised
Overnight, one external address ran a credential-stuffing run against the login endpoint, and unlike the noisy scanner earlier that night, this one got in. Your incident report does not need the attacker's address, it needs the blast radius. Work out which external address actually succeeded, then count how many DISTINCT accounts it logged into successfully. Read carefully: one account was signed into twice from that address, so the number of successful login events is not the number of accounts, and one more account stopped at a second-factor prompt and was never signed in at all. Submit the number of distinct accounts.
Play freely - sign up to submit your answer and earn XP.