Web Hacking
A structured path from core web vulnerability concepts to hands-on exploitation. Start with the guided foundation, then apply the ideas in realistic labs.
Introduction to Injection Vulnerabilities
Learn how trusted syntax and untrusted input become dangerous when their boundaries are mixed.
HANDS ON · MEDIUMInkwell
Exploit command injection and a cron wildcard mistake, then harden both vulnerabilities.
HANDS ON · MEDIUMSensorHub
Investigate unsafe deserialization over a custom telemetry protocol and a Linux capability issue.
GUIDED ROOM · EASYBasic SQL Injection
Discover a vulnerable product lookup, enumerate its database, and replace concatenated SQL with parameters.
GUIDED ROOM · MEDIUMSQL Injection: Going Deeper
Reason through UNION enumeration, database behavior, and why blacklists are not fixes.
GUIDED ROOM · MEDIUMBlind SQL Injection
Extract information from a yes/no response signal when the application hides database output.
GUIDED ROOM · HARDSecond-Order SQL Injection
Follow stored input into a later SQL sink and patch the vulnerability where it is actually used.
HANDS ON · HARDSQL Injection Final Assessment
Find five SQL injection workflows independently, retrieve the flags, and remediate every sink.
AUTH · MEDIUMBroken Password Reset
Waypoint’s first forgotten credential flow.
AUTH · MEDIUMSession Fixation
When a field-station ticket survives login.
AUTH · MEDIUMInsecure Remember-Me
A convenience cookie with no proof of issue.
AUTH · HARDJWT Algorithm Confusion
Fieldkit’s public key and an API trust mistake.
AUTH · HARDOAuth State Omission
A partner login callback with no browser binding.
AUTH · HARDThe Northfall Review
The connected Waypoint assessment.