So, the idea behind this project was to set the same task to two agents using the same LLM to see who could complete it first.

You are given access to a web application with basic protection mechanisms. Use the skills learned in this module to find the SQLi vulnerability with SQLMap and exploit it accordingly. To complete this module, find the flag and submit it here.

How I earned $1,500: Another race condition discovery in the same target.

How I earned $2,000 discovering a time-of-check to time-of-use vulnerability.

We are performing a Web Application Penetration Testing task for a company that hired you, which just released their new Security Blog. In our Web Application Penetration Testing plan, we reached the part where you must test the web application against Cross-Site Scripting vulnerabilities (XSS).

During our Penetration Test, we came across a web server that contains JavaScript and APIs. We need to determine their functionality to understand how it can negatively affect our customer.

To complete this Skills Assessment, you will need to apply the multitude of tools and techniques showcased throughout this module. All fuzzing can be completed using the common.txtAfter completing all steps in the assessment, you will be presented with a page that contains a flag in the format of HTB{…}. What is that flag?

To complete the skills assessment, answer the questions below. You will need to apply a variety of skills learned in this module, including: