Break the apps we built for you to break.

Ten deliberately vulnerable web applications, graded Beginner through Expert. Register, pick a challenge, and submit the flag you find. Scoreboard resets for no one.

View challenges Register Scoreboard

10 challenges

Beginner → Expert, one vulnerability class each

Flag format

Every flag looks like CTF{...}

Scoring

100–600 points by difficulty, first solve takes the glory

Targets

Each challenge links to its own app below its description

Hints

Some challenges sell hints for points — spend wisely

Rules

Attack only the challenge apps, not the platform

Runs entirely on company infrastructure for training. If something looks broken (not the intentionally broken kind), tell the organizers.