DAILYBeginner

Daily Recon Sweep

A target application has been deployed. Your job: enumerate its attack surface before the clock runs out. Identify exposed endpoints, headers, and any obvious misconfigurations.

mission brief

150

XP reward

20 min

est. time

> Objectives

01Identify all HTTP methods accepted by the target

02Find at least one information-disclosure header

03Document the server stack from response headers

04Locate one endpoint that returns verbose error messages

#recon#http#enumeration

next steps

More missions Learning paths Code Lab

← missions

Intermediate

SQLi Data Extraction

A login form is vulnerable to SQL injection. Extract the admin credentials from the database and document your methodology. Bonus: identify whether blind SQLi is also possible.

mission brief

300

XP reward

45 min

est. time

> Objectives

01Confirm the SQLi vulnerability with a proof-of-concept

02Extract the users table schema

03Retrieve the admin username and password hash

04Identify whether time-based blind SQLi is possible

#sqli#injection#database

next steps

More missions Learning paths Code Lab

← missions

Intermediate

XSS Filter Bypass

The target application has a WAF and client-side XSS filters. Your task: bypass them and achieve stored XSS that fires on every admin page load.

mission brief

350

XP reward

40 min

est. time

> Objectives

01Identify the XSS filter mechanism in use

02Craft a payload that bypasses the filter

03Achieve stored XSS in the comments section

04Confirm the payload fires on the admin dashboard

#xss#filter-bypass#waf

next steps

More missions Learning paths Code Lab

← missions

Intermediate

Threat Hunt: Alpha

You've been handed a 48-hour log export from a compromised server. Reconstruct the attack timeline, identify the initial access vector, and determine what data was exfiltrated.

mission brief

400

XP reward

50 min

est. time

> Objectives

01Identify the initial access timestamp and method

02Trace lateral movement through the network

03Determine which files were accessed or exfiltrated

04Write a 5-line incident summary

#log-analysis#incident-response#threat-hunting

next steps

More missions Learning paths Code Lab

Daily Recon Sweep

> Objectives

SQLi Data Extraction

> Objectives

XSS Filter Bypass

> Objectives

Threat Hunt: Alpha

> Objectives

Memory Forensics 101

> Objectives