A fictional hacking lab that runs entirely in your browser and on this server -- the terminal, the network, the "vulnerable" hosts, the exploits, the passwords are all fake and self-contained. Pick a difficulty, get a freshly generated target, work it start to finish, get root.
Random Easy, Medium, Hard, and Hard -- Chained (a two-machine pivot scenario). Every target is procedurally generated on the spot -- same seed always rebuilds the same box. Fastest clean runs post to a public leaderboard.
The bash interpreter, filesystem, and every exploit check run server-side. The browser is just a terminal UI -- nothing the client sends is ever trusted as the source of truth for what actually happened.
A 4-part guided tutorial walks you through different real techniques step by step -- brute-forcing a login, finding a hidden admin panel, running a real exploit, two distinct privilege-escalation tricks. A plain-language LESSONS tab explains what every tool does and why, no jargon, anytime you want a refresher.
One shared target, identical for every player until the weekly reset -- free, and separate from the random-seed boxes.
nmap -sV the target to see what's actually running before touching anything.hydra, or a hidden path via dirbuster leaking something to crack offline..bash_history slip-up, a leftover config file.cat-ing the right file once you can actually reach it.auth.log behind -- shred it before you're done to cover your tracks.A message from someone going by nullpoint, part of a hacktivist network: a school's camera system has a login page that shouldn't be reachable from outside the network. You're asked to look. Chapter 1 is free to play right now, no strings attached -- same recon-foothold-privesc playbook as every other box, just wrapped in an actual story.
You find a spreadsheet that shouldn't exist -- a watchlist tracking students for things like attending a walkout, or just posting about the camera policy online. The "safety" system isn't safety. It's surveillance wearing a friendly name.
That one school's data doesn't stay at that one school. The full campaign follows the thread from a single district to a regional data broker to a federal contractor quietly building a nationwide tracking system -- and the people running it start hunting back.