Hacking Challenges
Test your skills with CTF-style challenges
Start Hacking Real Servers
Create a free account to track your progress, start lab machines, and compete on the global leaderboard.
Recommended Challenge
7695 players
50 XP
Name
Attack Terminal
Difficulty
XP
Players
Rate
Date
Yes
Challenge
50
47
62%
18 Feb 2026
No
Challenge
50
176
50%
03 Feb 2026
Yes
Challenge
50
83
84%
03 Jan 2026
No
Challenge
50
80
64%
12 Nov 2025
No
Challenge
50
43
70%
05 Nov 2025
No
Challenge
50
38
58%
29 Oct 2025
Regex Bypass to SQLi
SQL InjectionRegex BypassInput ValidationWeb Application SecuritySQLiteUNION-Based SQLi
Yes
Challenge
50
24
46%
27 Oct 2025
Yes
Challenge
50
30
53%
22 Oct 2025
No
Challenge
50
30
67%
17 Oct 2025
Yes
Challenge
50
32
100%
13 Oct 2025
No
Challenge
50
35
97%
09 Oct 2025
Free
SQL Injection Test
SQL InjectionWeb SecurityDatabase SecurityAuthentication BypassInput ValidationPenetration Testing
Yes
Challenge
50
242
71%
08 Oct 2025
Free
Hack This Site
JavaScriptDeobfuscationClient-Side SecurityBrowser DevToolsCode AnalysisAuthentication Bypass
No
Challenge
50
155
72%
07 Oct 2025
HTTP Smuggling
HTTP ProtocolRequest SmugglingNetwork ForensicsTraffic AnalysisWeb SecurityPacket Analysis
No
Challenge
50
26
88%
06 Oct 2025
Email Header Forensics
Email ForensicsHeader AnalysisPhishing DetectionBase64 DecodingOSINTDigital Investigation
No
Challenge
50
39
77%
03 Oct 2025
Yes
Challenge
50
21
81%
02 Oct 2025
No
Challenge
50
21
76%
30 Sep 2025
Simple Directory Traversal
Directory TraversalPath InjectionFile System SecurityWeb SecurityInput ValidationPath ManipulationFile Access
Yes
Challenge
50
19
84%
29 Sep 2025
YAML Bomb
YAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationRemote Code ExecutionFile Processing Security
Yes
Challenge
50
16
63%
26 Sep 2025
WebDAV Explorer
WebDAV ExploitationFile UploadDirectory TraversalRemote File AccessHTTP MethodsWeb Server SecurityFile System Enumeration
Yes
Challenge
50
14
86%
25 Sep 2025
Prototype Pollution Hunter
Prototype PollutionNode.js SecurityAPI SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web Vulnerabilities
Yes
Challenge
50
20
50%
24 Sep 2025
Yes
Challenge
50
16
63%
23 Sep 2025
Yes
Challenge
50
16
100%
22 Sep 2025
Yes
Challenge
50
17
88%
19 Sep 2025
Corporate Directory Hunt
Directory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity Assessment
Yes
Challenge
50
15
93%
18 Sep 2025
Yes
Challenge
50
17
76%
17 Sep 2025
Yes
Challenge
50
17
65%
16 Sep 2025
Yes
Challenge
50
23
78%
15 Sep 2025
Yes
Challenge
50
14
64%
12 Sep 2025
No
Challenge
50
28
79%
11 Sep 2025
No
Challenge
50
33
76%
10 Sep 2025
Registry Hijacker
Docker Registry APIAuthentication BypassContainer SecurityAPI ManipulationRegistry Exploitation
Yes
Challenge
50
19
89%
09 Sep 2025
SUID Privilege Hunter
SUID BinariesPrivilege EscalationCommand InjectionLinux SecurityBinary Exploitation
Yes
Challenge
50
19
68%
08 Sep 2025
Yes
Challenge
50
21
81%
05 Sep 2025
Redis Cache Poisoner
CRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationWeb Security
Yes
Challenge
50
15
53%
04 Sep 2025
Yes
Challenge
50
18
89%
03 Sep 2025
Template Injector
Server-Side Template InjectionFlask SecurityJinja2 ExploitationRemote Code ExecutionWeb Security
Yes
Challenge
50
28
68%
29 Aug 2025
Yes
Challenge
50
27
70%
28 Aug 2025
WEP Cracker
Wireless SecurityWEP CrackingRC4 AnalysisPacket AnalysisCryptographic AttacksLegacy Protocol Exploitation
No
Challenge
50
43
53%
27 Aug 2025
Registry Hunter
Digital ForensicsWindows RegistryPersistence AnalysisBase64 DecodingIncident ResponseMalware Analysis
No
Challenge
50
25
76%
26 Aug 2025
WiFi Password Cracker
WiFi SecurityWPA CrackingDictionary AttacksWireless Penetration TestingNetwork SecurityPacket Analysis
No
Challenge
50
35
43%
25 Aug 2025
No
Challenge
50
22
68%
22 Aug 2025
Admin Portal Breach
Client-Side SecurityMD5 CrackingSource Code AnalysisWeb Application SecurityPassword AttacksAuthentication Bypass
No
Challenge
50
38
82%
21 Aug 2025
Git Secrets Hunter
Git ForensicsVersion Control SecurityRepository AnalysisPenetration TestingSecret RecoveryOSINT
Yes
Challenge
50
33
67%
20 Aug 2025
Corporate Backup Deserializer
Python PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksEnterprise Security
Yes
Challenge
50
23
57%
19 Aug 2025
ZIP Cracker
ZIP Password CrackingJohn the RipperfcrackzipDictionary AttacksBrute ForceArchive Security
No
Challenge
50
49
61%
18 Aug 2025
KeePass Breaker
KeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool Limitations
No
Challenge
50
24
67%
15 Aug 2025
Template Injection
Server-Side Template InjectionJinja2Flask SecurityWeb Application TestingCode InjectionPrivilege Escalation
Yes
Challenge
50
31
65%
14 Aug 2025
PDF Password Cracker
PDF SecurityPassword CrackingDictionary AttacksDigital ForensicsDocument SecurityBrute Force Attacks
No
Challenge
50
69
52%
13 Aug 2025
Shell Command Scanner
Command InjectionWeb SecurityShell CommandsSystem AdministrationHTTP Parameter ManipulationSecurity Assessment
Yes
Challenge
50
25
72%
12 Aug 2025
LFI Log Poison
Local File InclusionUser-Agent Log PoisoningRemote Code ExecutionDirectory TraversalWeb SecurityApache SecuritySystem AdministrationLog Analysis
Yes
Challenge
50
32
53%
11 Aug 2025
NoSQL Injection
NoSQL InjectionMongoDBVisibility ControlsAccess Control BypassSecurity TestingOperator Exploitation
Yes
Challenge
50
25
76%
08 Aug 2025
File Upload Bypass
File UploadWeb SecurityBypass TechniquesPHPWeb ShellsInput ValidationSocial EngineeringPost Exploitation
Yes
Challenge
50
25
56%
07 Aug 2025
URL Scanner
SSRFServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsNetwork SecurityWeb SecurityAWS EC2
Yes
Challenge
50
27
85%
06 Aug 2025
CSRF Bank Transfer
CSRFCross-Site Request ForgerySession SecurityWeb SecuritySocial EngineeringForm SecurityHTTP SecurityState Management
Yes
Challenge
50
31
48%
05 Aug 2025
XSS Playground
XSSCross-Site ScriptingStored XSSSession HijackingJavaScriptWeb SecurityClient-Side SecurityDOM Manipulation
Yes
Challenge
50
30
63%
04 Aug 2025
JWT Claims Manipulation
JWTClaims ManipulationPrivilege EscalationAuthentication BypassTime-Based AttacksSignature Cracking
Yes
Challenge
50
21
57%
31 Jul 2025
SQL Injection
SQL InjectionDatabase SecurityWeb SecurityBlind SQLiTime-based SQLiBoolean-based SQLiDatabase EnumerationVulnerability Assessment
Yes
Challenge
50
36
75%
30 Jul 2025
Yes
Challenge
50
26
69%
29 Jul 2025
Yes
Challenge
50
26
54%
28 Jul 2025
Yes
Challenge
50
121
57%
24 Jul 2025
Yes
Challenge
50
81
65%
23 Jul 2025
Free
Log Hunter
Log AnalysisWeb SecurityIncident ResponsePattern RecognitionFile DiscoveryCommand Line ToolsForensicsHTTP ProtocolAttack DetectionSecurity Assessment
No
Challenge
50
92
75%
22 Jul 2025
Yes
Challenge
50
19
58%
21 Jul 2025
Yes
Challenge
50
95
73%
18 Jul 2025
No
Challenge
50
24
79%
16 Jul 2025
No
Challenge
50
22
91%
11 Jul 2025
No
Challenge
50
24
88%
10 Jul 2025
Yes
Challenge
50
24
71%
09 Jul 2025
Yes
Challenge
50
17
76%
08 Jul 2025
No
Challenge
50
24
79%
07 Jul 2025
No
Challenge
50
22
55%
04 Jul 2025
Yes
Challenge
50
22
77%
03 Jul 2025
Yes
Challenge
50
20
80%
02 Jul 2025
Red is Dead
Network ReconnaissanceService DiscoveryDatabase ForensicsData EncodingCLI UsageData RecoveryIncident ResponseBase64Hex EncodingRedis
Yes
Challenge
50
24
79%
30 Jun 2025
Memory Forensics
Memory ForensicsBinary AnalysisDigital ForensicsPattern RecognitionIncident ResponseTool UsageData RecoveryROT13 Encoding
No
Challenge
50
20
75%
27 Jun 2025
API Breaker
API SecurityWeb HackingLogic FlawsPrivilege EscalationToken ManipulationBase64 EncodingAuthorization Bypass
Yes
Challenge
50
24
71%
26 Jun 2025
No
Challenge
50
23
74%
25 Jun 2025
No
Challenge
50
25
72%
24 Jun 2025
No
Challenge
50
21
90%
23 Jun 2025
No
Challenge
50
30
80%
20 Jun 2025
No
Challenge
50
20
85%
19 Jun 2025
No labs match your filters