Param Tampering

58

Total Solves

25m 48s

Avg Solve Time

1

First Blood Claimed

1m 33s

Record Time

FIRST BLOOD

Grex 🩸

cracked in 26m 46s

TOP 10 FASTEST

#1 「 ✦ Rimuru ✦ 」 1m 33s

#2 privalman 1m 46s

#3 % 1m 49s

#4 Atabey 2m 9s

#5 Txm 2m 11s

#6 harpy 3m 12s

#7 simboa 3m 30s

#8 Gombified 3m 56s

#9 G 4m 9s

#10 ᵣₑₚₑₙₜ 4m 10s

RELATED · Intermediate TIER

Command Injection

WEB+SSH Chain OS commands through a web interface

★★☆☆☆

Database Bypass

WEB+SSH Bypass authentication with SQL injection

★★☆☆☆

Malicious Upload

WEB+SSH Upload a web shell past file filters

★★☆☆☆

WEB Read server files through XML entity injection

★★☆☆☆

WEB+SSH Traverse directories to read sensitive files

★★☆☆☆

WEB+SSH Inject JavaScript to steal credentials

★★☆☆☆

Spawn this box.
Capture the flag.

Join the Discord and type /start hidden_params to spin up your own container.

join discord → sign in with discord