BattleGrounds
Sign inSign up

> Brought to you by Infophreak

BattleGrounds

Every session is unique.
From the sources you trust.
Train hard. Hack smart.

[00TOPICS LOADED]
[00QUESTIONS MAX]
[∞UNIQUE QUIZZES]
[00REGX CHALLENGES]
[00SECURE CODE]
[00CTF CHALLENGES]
[00RE LAB LEVELS]
[00CODING CHALLENGES]
[00BUG BUSTERS]
[00BUS CAPTURES]
OPERATIVE STATUSUPTIME: 00:00:00
RANKGHOST
CREDITS— cr
SESSIONS0

Trusted Knowledge Sources

This platform aggregates industry-leading security research and best practices from this trusted sources.

OWASP
OWASP
PortSwigger
PortSwigger
YesWeHack
YesWeHack
Microsoft
Microsoft
OWASP
OWASP
PortSwigger
PortSwigger
YesWeHack
YesWeHack
Microsoft
Microsoft
OWASP
OWASP
PortSwigger
PortSwigger
YesWeHack
YesWeHack
Microsoft
Microsoft
OWASP
OWASP
PortSwigger
PortSwigger
YesWeHack
YesWeHack
Microsoft
Microsoft
OWASP
OWASP
PortSwigger
PortSwigger
YesWeHack
YesWeHack
Microsoft
Microsoft
OWASP
OWASP
PortSwigger
PortSwigger
YesWeHack
YesWeHack
Microsoft
Microsoft
OWASP
OWASP
PortSwigger
PortSwigger
YesWeHack
YesWeHack
Microsoft
Microsoft
OWASP
OWASP
PortSwigger
PortSwigger
YesWeHack
YesWeHack
Microsoft
Microsoft

Select Game Mode

12 ways to sharpen your security skills.

Fresh every day

Quick Practice

Short sessions you can finish in a few minutes.
🎯
singleplayer

Quiz Mode

AI-generated questions across 13 cybersecurity domains. Choose a topic, configure difficulty, and grind your knowledge.

AndroidWeb PentestCTFMalware+9 more
→ Choose a Topic
/./
singleplayer

RegX

Write regex patterns to match highlighted targets in real security strings. 21 challenges across 10 difficulty levels.

portshashesCVEsJWTslookaheads
→ Start Training
</>
singleplayer

Secure Code

Spot the vulnerability in real-world code snippets. 87 challenges across 5 difficulty tiers: SQL injection, XSS, deserialization, and more.

SQLiXSSSSRFRCEAuth Bypass
→ Hunt Vulnerabilities

CTF & Research

Find the flag, break the binary, read the signals.
🚩
singleplayer

Capture the Flag

24 challenges from past Infophreak events. Download the files, find the flag, earn XP and credits.

ReversingForensicsOSINTWeb
→ Capture Flags
0x
singleplayer

RE Lab

Reverse-engineer 10 lock programs, or work a guided binary-exploitation ladder, on an emulated MSP430 chip. Step through the code in a browser debugger, read memory and find the way in.

MSP430AssemblyDebuggerExploit dev
→ Crack the Lock
∿
singleplayer

Bus Sniffer

A logic-analyzer capture from a board. Work out the protocol and its settings, decode the session, and find the secret it gives away.

UARTI2CSPIHardware
→ Read the Signals
🤖
singleplayer

AI Labs

Red-team chatbots: talk one into leaking a secret, then poison a web page so an assistant obeys it. Prompt injection and jailbreak practice.

Prompt InjectionJailbreaksLLM Security
→ Break the Bot
▦
singleplayer

Node Grid

A small grid of nodes, each running a few lines of a tiny assembly, moving numbers between input and output streams under a hard budget.

AssemblyStreamsOptimization
→ Program the Grid

Build & Defend

Write code, patch live sites and work like an AppSec engineer.
>_
singleplayer

Coding Practice

9 security-flavoured problems in Python or JavaScript. Run the examples in your browser, then submit against hidden tests for XP.

PythonJavaScriptParsingDetection
→ Start Coding
</>
singleplayer

Bug Busters

7 small websites with something wrong with them. Explore the live site like a pentester, find the flaw, then patch the code.

Node.jsPentestLive targetPatching
→ Start Patching
>_
singleplayer

Pipeline Defender

Fix insecure CI/CD workflows before they hand an attacker your secrets. Read the pipeline, patch the YAML, and the checker confirms it still works and the weaknesses are gone.

GitHub ActionsYAMLSecretsDevSecOps
→ Fix the Pipeline
!
singleplayer

Triage Desk

Work an AppSec engineer's queue of scanner findings. Spot the false positives, set the priorities and find out why the scanner's severity is often wrong.

SASTDASTSCASecrets
→ Open the Queue