Mission launch sequence armed
Public operators can step into the live sandbox immediately. The start route now frames the run as a checkpoint mission with visible reward pressure and the next unlock already in view.
Fingerprint the target
Start with one clean request and read what the application leaks without forcing the issue yet.
+300 XP
~60 min
Captured findings, exploit screenshots, and a vuln-to-fix mapping.
Completion Badge
Exploit Chain Runner
Clearance Upgrade
Application Strike Clearance
Next Unlock
Active Directory Attack Paths
Objective Count
4 checkpoints
Recommended after securing Linux escalation basics.
One move is live at a time. Stage the current command, read the result, and earn the next unlock.
0/300 XP
No chain yet
Lv.3 • Stage 1/4
25% charged
Only one move is armed. Stage it, read the output, then verify the exact clue you extracted.
Start with one clean request and read what the application leaks without forcing the issue yet.
Notes persist in this browser immediately. Save the mission later if you want the protected member handoff.
No chain yet
Clear the first checkpoint to unlock your first debrief badge, XP drop, and the next sealed stage.
Start with one clean request and read what the application leaks without forcing the issue yet.
Start with the public product endpoint to confirm the app surface.
Future stage stays sealed until the current checkpoint is verified.
Future stage stays sealed until the current checkpoint is verified.
Future stage stays sealed until the current checkpoint is verified.
Start with one clean request and read what the application leaks without forcing the issue yet.
Sign in only if you want to continue inside the protected workspace after this public sandbox run.
Stage one checkpoint at a time instead of dumping the whole walkthrough at once.
Read the terminal output closely. Each checkpoint stays sealed until the verification signal matches.
Clear this mission to unlock the next queue tile: Active Directory Attack Paths.
This public start flow lands in the same live mission workspace a member uses after auth. Authentication only gates saved notes, streak continuity, and the protected handoff inside /app/labs/owasp-top10.
Sign in when you want recruiter-facing proof, checkpoint history, saved streaks, and the protected next-mission queue.