28
Participants
20
Challenges
327
Total Solves
Rankings
| # | Handle | Points | Solves | Last Solve |
|---|---|---|---|---|
| 1 | chowar13 | 4951 | 20 | 2026-04-14 17:25:36 |
| 2 | gwen | 4951 | 20 | 2026-04-14 18:39:47 |
| 3 | ckarur | 4951 | 20 | 2026-04-14 19:54:46 |
| 4 | tylerp | 3701 | 17 | 2026-04-16 18:53:25 |
| 5 | acid_burn | 3701 | 17 | 2026-04-16 19:21:47 |
| 6 | Will | 3351 | 15 | 2026-04-16 18:02:45 |
| 7 | edgardA | 3201 | 16 | 2026-04-16 17:30:08 |
| 8 | jrangel | 2951 | 15 | 2026-04-16 18:02:03 |
| 9 | TrevorT | 2701 | 14 | 2026-04-16 17:41:58 |
| 10 | Samuel | 2701 | 15 | 2026-04-21 02:45:30 |
| 11 | RoomDoom01 | 2451 | 14 | 2026-04-16 18:46:02 |
| 12 | DannyK | 2451 | 14 | 2026-04-16 18:50:26 |
| 13 | ChristopherTu | 1851 | 11 | 2026-04-16 17:41:08 |
| 14 | Javi | 1851 | 12 | 2026-04-21 04:00:05 |
| 15 | Morp | 1751 | 10 | 2026-04-14 19:46:06 |
| 16 | Jzow | 1501 | 10 | 2026-04-15 01:31:22 |
| 17 | areye | 1501 | 10 | 2026-04-20 18:25:55 |
| 18 | dmchun | 1350 | 9 | 2026-04-16 18:50:05 |
| 19 | Kai | 1251 | 9 | 2026-04-16 08:24:02 |
| 20 | Ivan | 1101 | 9 | 2026-04-16 17:29:35 |
| 21 | hchen | 950 | 4 | 2026-04-21 19:15:58 |
| 22 | EddyRes | 901 | 7 | 2026-04-16 17:30:45 |
| 23 | m30wsters | 851 | 8 | 2026-04-14 18:01:55 |
| 24 | kfan | 751 | 7 | 2026-04-16 17:25:10 |
| 25 | dabram01 | 750 | 6 | 2026-04-16 17:30:40 |
| 26 | shuyayanase | 651 | 6 | 2026-04-14 17:31:16 |
| 27 | jgarc710 | 651 | 6 | 2026-04-16 06:42:57 |
| 28 | skeopila | 651 | 6 | 2026-04-16 17:25:13 |
Challenge Solve Counts
| Name | Points | Solves |
|---|---|---|
| Example | 1 | 25 |
| Base64 in robots.txt | 100 | 28 |
| Debug Cookie Exposure | 100 | 28 |
| HTML Source Comment | 100 | 16 |
| HTTP Response Header Leak | 100 | 27 |
| Hidden Form Field | 100 | 27 |
| IDOR - Order Enumeration | 100 | 22 |
| Sensitive Data Exposure - API Hash Crack | 100 | 13 |
| Directory Traversal - Config Leak | 250 | 20 |
| EXIF Metadata Extraction | 250 | 5 |
| Git Stash Discovery | 250 | 15 |
| Hex-Encoded Hidden DB Table | 250 | 9 |
| ROT13 Encoded JS Comment | 250 | 27 |
| SQL Injection - Union Attack | 250 | 18 |
| Strings in Image File | 250 | 11 |
| AES Encrypted File - Chained Vulns | 500 | 3 |
| Bash History via Traversal | 500 | 7 |
| Broken Auth - Predictable Reset Token | 500 | 14 |
| Insecure Deserialization - RCE | 500 | 9 |
| Stored XSS - Admin Cookie Theft | 500 | 3 |