Domains
Preview mode is live.
Browse the catalog and inspect challenge scenarios now. Create an account to submit flags, reveal hints, and save progress.
Showing 8 challenges
Sign in to track completions
Email Format Recon
Determine a company's email format convention using known examples.
SPF Record Analysis
Identify a company's email provider from DNS SPF record data.
Certificate Transparency Hunt
Use certificate transparency logs to find a high-risk subdomain running EOL software.
PDF Metadata Extraction
Extract the Windows username of the document author from PDF ExifTool output.
GitHub Secret Exposure
Identify what type of AWS credential is indicated by the AKIA prefix in a leaked key.
Shodan Discovery
Locate an unauthenticated MongoDB instance exposed via Shodan.
Passive DNS Pivot
Identify a threat actor's phishing infrastructure subnet from a passive DNS investigation.
Google Dorking
Identify the Google dork operator used to filter search results by file extension.