whoami
lab
labs
leaderboard
hall of fame
discord ↗
main site ↗
sign in
XML Attack
86
Total Solves
22m 24s
Avg Solve Time
1
First Blood Claimed
31s
Record Time
FIRST BLOOD
「 ✦ Rimuru ✦ 」
🩸
cracked in 1m 43s
TOP 10 FASTEST
#1
khan
31s
#2
r
43s
#3
Kael
51s
#4
n23
55s
#5
Ray
1m 4s
#6
Lithium
1m 5s
#7
#Run21ner ⚡
1m 10s
#8
Kaguya
1m 19s
#9
User 0755
1m 25s
#10
Revy
1m 29s
RELATED · Intermediate TIER
Command Injection
WEB+SSH
Chain OS commands through a web interface
★★☆☆☆
Database Bypass
WEB+SSH
Bypass authentication with SQL injection
★★☆☆☆
Malicious Upload
WEB+SSH
Upload a web shell past file filters
★★☆☆☆
Path Traversal
WEB+SSH
Traverse directories to read sensitive files
★★☆☆☆
Script Kiddie
WEB+SSH
Inject JavaScript to steal credentials
★★☆☆☆
Vault Cracker
WEB+SSH
Decode layered encoding to crack a vault
★★☆☆☆
Spawn this box.
Capture the flag.
Join the Discord and type
/start xxe
to spin up your own container.
join discord →
sign in with discord