Param Tampering

42

Total Solves

28m 57s

Avg Solve Time

1

First Blood Claimed

1m 33s

Record Time

FIRST BLOOD

Grex 🩸

cracked in 26m 46s

TOP 10 FASTEST

#1 「 ✦ Rimuru ✦ 」 1m 33s

#2 privalman 1m 46s

#3 Txm 2m 11s

#4 harpy 3m 12s

#5 G 4m 9s

#6 anderdingus 4m 55s

#7 Kael 5m 11s

#8 Rocostre 5m 27s

#9 spkz 6m 1s

#10 Machine Gun Wølf 🐺 7m 4s

RELATED · Intermediate TIER

Command Injection

WEB+SSH Chain OS commands through a web interface

★★☆☆☆

Database Bypass

WEB+SSH Bypass authentication with SQL injection

★★☆☆☆

Malicious Upload

WEB+SSH Upload a web shell past file filters

★★☆☆☆

WEB Read server files through XML entity injection

★★☆☆☆

WEB+SSH Traverse directories to read sensitive files

★★☆☆☆

WEB+SSH Inject JavaScript to steal credentials

★★☆☆☆

Spawn this box.
Capture the flag.

Join the Discord and type /start hidden_params to spin up your own container.

join discord → sign in with discord