Skip to contentExploitQuest

Hands-on

Labs

Real challenges, not multiple choice. Each one drops you into a terminal on a small machine with a flag hidden somewhere in it — explore, find it, and submit it. Your flag is unique to you, so answers can't be shared. Solving earns XP.

Easy

Hidden in Plain Sight

The flag is sitting in your home directory right now — but a plain `ls` will not show it, because its name begins with a dot. Reveal the hidden files, then read the one that matters.

Easy

The Careless Backup

An admin left a secret in a backup file somewhere on this box. It is not in your home directory. Find it, and submit the flag.

Easy

Needle in the Log

The flag leaked into a log file — thousands of ordinary lines, one that matters. Reading it all is hopeless. Find the line with grep.

Easy

The Honest Mistake

An internal staff directory with one line of bad code in it. The search box builds its SQL by gluing your text into the middle of a query. Find the row it is trying to keep from you.