System Online v2.4

Master the art of exploitation

Bug Hunting | CTF | Web SecurityLearning by testing, breaking, and understanding systems.Keya

root@0xREQ:~
➜ ~ init_sequence --target=all
[+] Analyzing network topology...
[+] Bypassing firewall rules... SUCCESS
[+] Enumerating services...
PORT 22 OPEN (SSH)
PORT 80 OPEN (HTTP)
PORT 443 OPEN (HTTPS)
PORT 3306 FILTERED
➜ ~ inject_payload
USER_882 PWNED MACHINE_CORP_V1
NEW BOUNTY $15,000 ADDED BY FINTECH_SYS
CVE-2023-9021 PATCH ANALYZED
ANON_X CAPTURED FLAG {R00T_ACC3SS}
USER_882 PWNED MACHINE_CORP_V1
NEW BOUNTY $15,000 ADDED BY FINTECH_SYS
CVE-2023-9021 PATCH ANALYZED

Training Modules

Select your attack vector.

VIEW_ALL_MODULES

Web Exploitation

Master OWASP Top 10, SQL injection, XSS, and server-side vulnerabilities in modern web apps.

SQLi RCE

Binary Exploitation

Dive deep into memory corruption, buffer overflows, and ROP chains. Reverse engineer the unknown.

Assembly GDB

Privilege Escalation

Learn how to move from a standard user to root. Linux and Windows kernel exploitation techniques.

Linux Active Directory
Live Target

Operation: Black Citadel

A highly secured banking infrastructure simulation. Infiltrate the perimeter, bypass the IDS, and exfiltrate the customer database.

DIFFICULTY
REWARD POOL $2,500.00
ACTIVE HACKERS 142
TARGET_IP 10.10.24.88
OS Linux (Debian) 
function authenticate(user) {
  if (user.access_level != "admin") {
    // TODO: Fix race condition here
    return false;
  }
  return true;
}
75% PWNED