skip to main content
hacking.communityplay in the sandbox.
Back to track
Capstone Exam

Bug Bounty Hunter — Capstone

Five hand-picked Web/API bugs across all difficulties. Capture every flag in 3 hours.

Sign up to take the exam

Capture all 5 flags

Classic UNION-based SQL Injection
easy· webopen lab
Reflected XSS Sandbox
easy· webopen lab
Server-Side Request Forgery
medium· webopen lab
Insecure Direct Object Reference
easy· authopen lab
Race Condition
hard· logicopen lab
// install app

Install hacking.community for fast access, offline reading, and push notifications. No app store needed.