A Hands On Campaign To Learn // Discover to Exploit

Learn web exploitation.
Progress Ahead To Discover.

A browser based web application built around isolated challenge simulations that replicate real world web application vulnerabilities.

Create Operator → Authenticate

RECON›ANALYSE›EXPLOIT›REPORT

root@hacker:~/webxploit

$ ./info --campaign

encounters     37
normal_levels  30
stage_bosses   06
ultimate_boss  01

Info:

  Hints        PRESENT
  Resets       PRESENT
  Simulation   PRESENT

$ campaign --start_

30individual levels

6hardcore bosses

1full assessment challenge

CAMPAIGN OVERVIEW

Six stages. Many concepts but same mindset.

TRACE // ORIGIN // RECON

Reconnaissance and Information Discovery

Discover what the application reveals before touching its logic.

[signal]──[route]──[artifact]

BOSS // The Forgotten Webroot

IDENTITY // DRIFT // SERVER

Authentication and Session Weaknesses

Separate browser-side appearance from server-side trust.

[identity]──[state]──[trust]

BOSS // The Impostor Session

INJECT // MUTATE // EXTRACT

Injection Attacks

Observe where data crosses into an interpreter, safely simulated here.

[input]──[boundary]──[effect]

BOSS // The Injection Engine

VAULT // FRACTURE // BREACH

Files, Paths and Server-Side Exposure

Follow path construction, file exposure and upload handling.

[name]──[path]──[object]

BOSS // The File Vault

BOUNDARY // FAULT // FIND

Requests, Parsers and Trust Boundaries

Compare how components interpret the same request.

[request]⇄[parser]⇄[service]

BOSS // The Trusted Request

AUTH // LOGIC // COLLAPSE

Access Control and Business Logic

Test every object, function and workflow at the server boundary.

[subject]──[action]──[object]

BOSS // The Privilege Gate

GUIDE PANEL

Vulnerable levels. Learning platform.

01 Every challenge is solvable logically without blind guessing and bruteforcing any routes or passwords.

02 Enough information exists for thinking logically about the intended path to the solution.

03 The platform is made with the intent to learn and practice the web vulnerabilities for everyone.

04 Furthers levels for advanced exploitation will be added as per the future planning .

Learn web exploitation.Progress Ahead To Discover.