Web Foundations
HTTP, headers, cookies, sessions and information disclosure.
8 BEGINNER LABSPractice real-world web application security concepts through guided labs, flags and challenging CTF missions.
$ scan web-academy.local [+] Target online [+] /login.php discovered [!] Authentication weakness detected $ submit MNA{access_granted} ✓ FLAG ACCEPTED — 100 XP _
A structured progression designed for students entering web application security.
HTTP, headers, cookies, sessions and information disclosure.
8 BEGINNER LABSAuthentication, access control, XSS and SQL injection.
8 INTERMEDIATE LABSTraversal, CSRF, file uploads, JWT and API authorization.
4 ADVANCED LABSCombine your skills across multi-stage, story-driven challenges.
10 CAPSTONE CTFsCreate your account. Once approved by an instructor, all assigned labs unlock in your dashboard.
Create student account →