Learn security by playing it
Infophreak BattleGrounds is a cybersecurity training game. Break things, fix things and reverse engineer things in quizzes, capture-the-flag challenges, live targets and a browser debugger, and see your progress on the leaderboards.
Who we are
BattleGrounds is made by Infophreak. Our capture-the-flag challenges come from past Infophreak events, and the rest of the platform grew from one idea: security skills are learned by doing, so training should feel more like a game you want to keep playing than a course you have to finish.
Learn by doing
Nothing here is a slideshow. You read code, attack running sites, step through firmware and write patches, and a server checks the result rather than your word for it.
Compete and team up
Win 1v1 matches, climb leaderboards for every mode, take first bloods on new challenges, join a team and challenge a friend. XP and ranks make progress visible.
Train for the job
Career tracks turn real job descriptions into game modes. Triage Desk is the first for the AppSec engineer track: prioritise findings like the people who do it every day.
What you can play
Quiz Mode
13 topicsQuestions generated fresh and grounded in OWASP, PortSwigger and mobile security guides, solo or as a 1v1 match with a wager.
RegX
21 puzzlesWrite the regular expression that matches the target and nothing else.
Secure Code
87 snippetsRead real vulnerable code and name the flaw.
Capture the Flag
24 challengesCapture-the-flag challenges from past Infophreak events, with downloads, hints and hosted web targets.
RE Lab
10 levels, 3 exploit labsReverse engineer lock programs and work through guided binary-exploitation ladders on an emulated CPU in a browser debugger. A fresh lock every day and week.
Bus Sniffer
4 capturesRead a logic-analyzer capture from a board: work out the protocol and its settings, decode the session, find the secret.
AI Labs
Red-team chatbots: talk one into leaking a secret, then poison a web page so an assistant obeys it. Prompt injection and jailbreak practice.
Node Grid
A small grid of nodes, each running a few lines of a tiny assembly, moving numbers between input and output streams under a hard budget.
Coding Practice
9+ problemsSecurity-flavoured problems in Python and JavaScript, graded on hidden tests, with a new challenge every day.
Bug Busters
7 projectsAttack a live website like a pentester, then patch its code and prove the flaw is gone.
Pipeline Defender
3 challengesFix insecure CI/CD workflows before they hand an attacker your secrets, and the checker confirms the weaknesses are gone.
Triage Desk
3 shiftsWork an AppSec engineer's queue of scanner findings: what is noise, and what is urgent?
Built to be trusted
A security training site is a target too, so it is built the way we teach: nothing the browser says about your score is believed.
- Answers are graded on the server. Answer keys, flags and hidden tests are never sent to your browser.
- Code you write runs in a disposable sandbox with no network access, and live targets open only for the player who started them.
- Rewards are capped per day and first-solve only, so XP and the leaderboards stay meaningful.
- Two-factor sign-in with an authenticator app, and a check of your identity before sensitive account changes.
Free to start, Pro to go further
Easy challenges, daily quizzes, multiplayer and the leaderboards are free. Pro adds more AI quizzes and Exam mode, the medium and hard Coding Practice and Bug Busters challenges, and hosted CTF targets.