A fictional hacking lab that runs entirely in your browser and on this server -- the terminal, the network, the "vulnerable" hosts, the exploits, the passwords are all fake and self-contained. Pick a difficulty, get a freshly generated target, work it start to finish, get root.
Random Easy, Medium, Hard, and Hard -- Chained (a two-machine pivot scenario). Every target is procedurally generated on the spot -- same seed always rebuilds the same box.
The bash interpreter, filesystem, and every exploit check run server-side. The browser is just a terminal UI -- nothing the client sends is ever trusted as the source of truth for what actually happened.
Create an account and we walk you through your first target step by step -- what to type, why, and when -- until you land your first root.
One shared target, identical for every player until the weekly reset -- free, and separate from the random-seed boxes.
nmap -sV the target to see what's actually running before touching anything.hydra, or a hidden path via dirbuster leaking something to crack offline..bash_history slip-up, a leftover config file.cat-ing the right file once you can actually reach it.auth.log behind -- shred it before you're done to cover your tracks.