Practice modern web application security with realistic challenges focusing on OWASP Top 10 vulnerabilities. No bruteforcing, no puzzles, just pure skill. New challenge added every month.

Available Challenges (5)

Bank Vault (1 flag) - easy
Test your HTTP skills and crack the vault.
[ TRY CHALLENGE ]
Pebble (1 flag) - medium
Put your GraphQL skills to test.
[ TRY CHALLENGE ]
The bank (1 flag) - easy
Test your API security skills
[ TRY CHALLENGE ]
Factory (3 flags) - medium
Test your web application skills.
[ TRY CHALLENGE ]
City (3 flags) - hard
Test your web application skills in smart city!
[ TRY CHALLENGE ]

Want to submit flags and join the leaderboard?

Support WebSecDojo

Help keep these challenges free and support new content