Web

Intro to Web Security

Learn how attackers see the web, then find your first flags.

webhttpdevtools

Easy Enter →

Web

How the Web Works

Requests, responses, methods and status codes — the foundation every web hacker needs.

webhttpmethods

Easy Enter →

Web 🔒 Pro

Web Exploitation Basics

The three bugs you will find on almost every web app.

webxssidor

Medium Unlock →

Web 🔒 Pro

SQL Injection In Depth

Understand why SQL injection happens, bypass a login, and extract data with UNION.

websqlidatabase

Medium Unlock →

Web 🔒 Pro

Cross-Site Scripting (XSS)

Run JavaScript in someone else's browser — and learn the one rule that stops it.

webxssjavascript

Medium Unlock →

Web 🔒 Pro

API Hacking & SSRF

Test the API-first attack surface: IDOR, broken auth, and server-side request forgery.

apissrfweb

Medium Unlock →

Web 🔒 Pro

SQL Injection

Turn a login form into a database dump.

websqlidatabase

Hard Unlock →