DAILYBeginner

Daily Recon Sweep

A target application has been deployed. Your job: enumerate its attack surface before the clock runs out. Identify exposed endpoints, headers, and any obvious misconfigurations.

mission brief

150

XP reward

20 min

est. time

> Objectives

01Identify all HTTP methods accepted by the target

02Find at least one information-disclosure header

03Document the server stack from response headers

04Locate one endpoint that returns verbose error messages

#recon#http#enumeration

next steps

More missions Learning paths Code Lab

← missions

Intermediate

SQLi Data Extraction

A login form is vulnerable to SQL injection. Extract the admin credentials from the database and document your methodology. Bonus: identify whether blind SQLi is also possible.

mission brief

300

XP reward

45 min

est. time

> Objectives

01Confirm the SQLi vulnerability with a proof-of-concept

02Extract the users table schema

03Retrieve the admin username and password hash

04Identify whether time-based blind SQLi is possible

#sqli#injection#database

next steps

More missions Learning paths Code Lab

← missions

Intermediate

Threat Hunt: Alpha

You've been handed a 48-hour log export from a compromised server. Reconstruct the attack timeline, identify the initial access vector, and determine what data was exfiltrated.

mission brief

400

XP reward

50 min

est. time

> Objectives

01Identify the initial access timestamp and method

02Trace lateral movement through the network

03Determine which files were accessed or exfiltrated

04Write a 5-line incident summary

#log-analysis#incident-response#threat-hunting

next steps

More missions Learning paths Code Lab

← missions

Intermediate

Memory Forensics 101

A memory dump from a compromised workstation has been provided. Identify the malicious process, extract its network connections, and recover the C2 domain.

mission brief

450

XP reward

55 min

est. time

> Objectives

01List all running processes at time of capture

02Identify the suspicious process by name and PID

03Extract active network connections from the process

04Recover the C2 domain or IP from memory strings

#memory-forensics#malware#c2

next steps

More missions Learning paths Code Lab

Daily Recon Sweep

> Objectives

SQLi Data Extraction

> Objectives

XSS Filter Bypass

> Objectives

Threat Hunt: Alpha

> Objectives

Memory Forensics 101

> Objectives