CyberWorld// Training Lab

Verifying training session...

Five distinct defensive challenges. Investigate the simulated system, confirm findings, and close the 33-signal training run.

Mission Relay

Syncing tactical feed...

The grid is unstable. Pick the next node and keep pressure on the breach chain.

Wait for manifest verification.

Continue recommended node →

Tier 1 -- Defensive Audit

0/10

10 observations about the auth surface itself. Self-check rubric and live re-verification of session/asset/manifest.

Open console

Tier 2 -- Cryptanalysis

0/5

RSA-toy factor + decrypt, ECDSA P-256 verify, 16-bit HMAC collision, Vigenere break. Web Crypto + BigInt.

Open crypto lab

Tier 3 -- Threat Intel

0/5

May-2026 CVE attribution, MITRE ATT&CK technique mapping, NIST IR phase, threat actor, zero-width-space stego.

Open intel desk

Tier 4 -- Burp Workbench

0/10

Service-worker backend at /api/v1/*. JWT alg=none, IDOR, path traversal, X-Forwarded-For trust, HPP, race, chained master flag. Real Burp / curl exercises.

Open intercept

Tier 5 -- Deeper Chain

0/3

JWT HS256/RS256 key confusion (RFC 8725 sec. 3.1), Object.prototype pollution via deep-merge (CWE-1321), and SW cache-vs-auth confusion (CWE-639).

Open intercept

0/33 confirmed -- partial XOR = 0x00000000 -- target 0x--------

session.e: --
asset.file: --
manifest: --