Web
Intro to Web Security
Learn how attackers see the web, then find your first flags.
webhttpdevtools
// pick your next challenge
All rooms
8 rooms match your filters.
Web
How the Web Works
Requests, responses, methods and status codes — the foundation every web hacker needs.
webhttpmethods
Start Here
Your First Hack: A Guided Walkthrough
Capture a real hidden flag on this very website, step by step. No tools required.
beginnerreconview-source
Web
🔒 Pro
Web Exploitation Basics
The three bugs you will find on almost every web app.
webxssidor
Web
🔒 Pro
SQL Injection In Depth
Understand why SQL injection happens, bypass a login, and extract data with UNION.
websqlidatabase
Web
🔒 Pro
Cross-Site Scripting (XSS)
Run JavaScript in someone else's browser — and learn the one rule that stops it.
webxssjavascript
Web
🔒 Pro
API Hacking & SSRF
Test the API-first attack surface: IDOR, broken auth, and server-side request forgery.
apissrfweb
Web
🔒 Pro
SQL Injection
Turn a login form into a database dump.
websqlidatabase