A webapp hacking game, where players must locate and exploit vulnerabilities to progress through the story. Think WebGoat but with a plot and a focus on realism&difficulty. Contains XSS, CSRF, SQLi, ReDoS, DOR, command injection, etc
Features
- Client attack simulation using HtmlUnit; no alert('xss') here.
- Smooth difficulty gradient from moderately easy to fiendishly tricky.
- Realistic vulnerabilities modelled from Google, Mozilla, etc (No rot13!)
- Open ended play; progress by any means possible.
License
Apache License V2.0Follow hackxor
Other Useful Business Software
Gen AI apps are built with MongoDB Atlas
MongoDB Atlas provides built-in vector search and a flexible document model so developers can build, scale, and run gen AI apps without stitching together multiple databases. From LLM integration to semantic search, Atlas simplifies your AI architecture—and it’s free to get started.
Rate This Project
Login To Rate This Project
User Reviews
-
Great stuff.