Modules

Follow a focused path through related vulnerabilities. Choose a module to see its rooms, difficulty range, and recommended progression.

Web security · 6 rooms

Injection

Learn how untrusted input crosses language boundaries, from introductory concepts through SQL, command, and deserialization attack paths.

Easy → HardHands-on + Guided

Web security · 7 rooms

Authentication

Explore broken recovery, session handling, remember-me cookies, lockout races, JWT verification, OAuth callbacks, and a connected assessment.

Medium → HardGuided + Assessment