Challenge #1: Authentication Bypass (OWASP A01:2021)
Easy
🔒 Locked
A developer left debug code in the login system. Can you find the hidden flag without valid credentials?
Hint: Try common debug parameters like
?debug=true or check the page source...
Need a hint?
Sometimes developers leave commented-out code in the HTML source. Press Ctrl+U to view source!
Challenge #2: SQL Injection (OWASP A03:2021)
Medium
🔒 Locked
A vulnerable search function allows database queries. Can you extract the hidden flag?
Challenge #3: XSS Attack (OWASP A03:2021)
Medium
🔒 Locked
A comment section doesn't sanitize user input. Can you inject malicious JavaScript?
Challenge #4: Cryptographic Failures (OWASP A02:2021)
Hard
🔒 Locked
Weak encryption protects a secret. Can you break it and recover the flag?
More challenges coming soon...
A05:2021 Security Misconfiguration | A06:2021 Vulnerable Components | A07:2021 Auth Failures