DAILYBeginner

Daily Recon Sweep

A target application has been deployed. Your job: enumerate its attack surface before the clock runs out. Identify exposed endpoints, headers, and any obvious misconfigurations.

mission brief

150

XP reward

20 min

est. time

> Objectives

01Identify all HTTP methods accepted by the target

02Find at least one information-disclosure header

03Document the server stack from response headers

04Locate one endpoint that returns verbose error messages

#recon#http#enumeration

next steps

More missions Learning paths Code Lab

← missions

Intermediate

XSS Filter Bypass

The target application has a WAF and client-side XSS filters. Your task: bypass them and achieve stored XSS that fires on every admin page load.

mission brief

350

XP reward

40 min

est. time

> Objectives

01Identify the XSS filter mechanism in use

02Craft a payload that bypasses the filter

03Achieve stored XSS in the comments section

04Confirm the payload fires on the admin dashboard

#xss#filter-bypass#waf

next steps

More missions Learning paths Code Lab

← missions

Intermediate

Threat Hunt: Alpha

You've been handed a 48-hour log export from a compromised server. Reconstruct the attack timeline, identify the initial access vector, and determine what data was exfiltrated.

mission brief

400

XP reward

50 min

est. time

> Objectives

01Identify the initial access timestamp and method

02Trace lateral movement through the network

03Determine which files were accessed or exfiltrated

04Write a 5-line incident summary

#log-analysis#incident-response#threat-hunting

next steps

More missions Learning paths Code Lab

← missions

Intermediate

Memory Forensics 101

A memory dump from a compromised workstation has been provided. Identify the malicious process, extract its network connections, and recover the C2 domain.

mission brief

450

XP reward

55 min

est. time

> Objectives

01List all running processes at time of capture

02Identify the suspicious process by name and PID

03Extract active network connections from the process

04Recover the C2 domain or IP from memory strings

#memory-forensics#malware#c2

next steps

More missions Learning paths Code Lab

Daily Recon Sweep

> Objectives

SQLi Data Extraction

> Objectives

XSS Filter Bypass

> Objectives

Threat Hunt: Alpha

> Objectives

Memory Forensics 101

> Objectives