Tiny board.
Real lessons.

Capture all 6 flags. Everything you need is inside this isolated network.

OPEN

1. Source Sleuth

Find information that the rendered page does not show.

Investigate
OPEN

2. Forgotten Backup

Discover a file that was hidden from search engines.

Investigate
OPEN

3. Encoded Telemetry

Inspect an API and identify how its payload was encoded.

Investigate
OPEN

4. Cookie Crown

Test whether the server trusts data controlled by your browser.

Investigate
OPEN

5. Behind the Button

Decide whether a hidden form field is a trustworthy authorization control.

Investigate
OPEN

6. Debug Dial

Test whether a query parameter can expose a privileged diagnostic mode.

Investigate

Submit a flag

Progress: 0 / 6