whoami
lab
labs
leaderboard
hall of fame
discord ↗
main site ↗
sign in
XML Attack
113
Total Solves
20m 9s
Avg Solve Time
1
First Blood Claimed
31s
Record Time
FIRST BLOOD
「 ✦ Rimuru ✦ 」
🩸
cracked in 1m 43s
TOP 10 FASTEST
#1
khan
31s
#2
sin
41s
#3
Notzz
43s
#4
Kipo
47s
#5
Kael
51s
#6
n23
55s
#7
Ray
1m 4s
#8
Lithium
1m 5s
#9
#Run21ner ⚡
1m 10s
#10
terxiz#779#krx
1m 13s
RELATED · Intermediate TIER
Command Injection
WEB+SSH
Chain OS commands through a web interface
★★☆☆☆
Database Bypass
WEB+SSH
Bypass authentication with SQL injection
★★☆☆☆
Malicious Upload
WEB+SSH
Upload a web shell past file filters
★★☆☆☆
Path Traversal
WEB+SSH
Traverse directories to read sensitive files
★★☆☆☆
Script Kiddie
WEB+SSH
Inject JavaScript to steal credentials
★★☆☆☆
Vault Cracker
WEB+SSH
Decode layered encoding to crack a vault
★★☆☆☆
Spawn this box.
Capture the flag.
Join the Discord and type
/start xxe
to spin up your own container.
join discord →
sign in with discord