DAILYBeginner

Daily Recon Sweep

A target application has been deployed. Your job: enumerate its attack surface before the clock runs out. Identify exposed endpoints, headers, and any obvious misconfigurations.

mission brief

150

XP reward

20 min

est. time

> Objectives

01Identify all HTTP methods accepted by the target

02Find at least one information-disclosure header

03Document the server stack from response headers

04Locate one endpoint that returns verbose error messages

#recon#http#enumeration

next steps

More missions Learning paths Code Lab

← missions

Intermediate

SQLi Data Extraction

A login form is vulnerable to SQL injection. Extract the admin credentials from the database and document your methodology. Bonus: identify whether blind SQLi is also possible.

mission brief

300

XP reward

45 min

est. time

> Objectives

01Confirm the SQLi vulnerability with a proof-of-concept

02Extract the users table schema

03Retrieve the admin username and password hash

04Identify whether time-based blind SQLi is possible

#sqli#injection#database

next steps

More missions Learning paths Code Lab

← missions

Intermediate

XSS Filter Bypass

The target application has a WAF and client-side XSS filters. Your task: bypass them and achieve stored XSS that fires on every admin page load.

mission brief

350

XP reward

40 min

est. time

> Objectives

01Identify the XSS filter mechanism in use

02Craft a payload that bypasses the filter

03Achieve stored XSS in the comments section

04Confirm the payload fires on the admin dashboard

#xss#filter-bypass#waf

next steps

More missions Learning paths Code Lab

← missions

Intermediate

Memory Forensics 101

A memory dump from a compromised workstation has been provided. Identify the malicious process, extract its network connections, and recover the C2 domain.

mission brief

450

XP reward

55 min

est. time

> Objectives

01List all running processes at time of capture

02Identify the suspicious process by name and PID

03Extract active network connections from the process

04Recover the C2 domain or IP from memory strings

#memory-forensics#malware#c2

next steps

More missions Learning paths Code Lab

Daily Recon Sweep

> Objectives

SQLi Data Extraction

> Objectives

XSS Filter Bypass

> Objectives

Threat Hunt: Alpha

> Objectives

Memory Forensics 101

> Objectives