Solve challenges.
Build reputation.

Find the cracks in computer security with hands-on missions. Solve challenges, sharpen your methodology, track your growth, and build reputation when you complete a series.

Beginner to advancedTracked solvesCertificate series

ARENA.J77CYBER — RECON

Current run

0 pts

0 flags captured

Mapped to

OWASP
MITRE ATT&CK

Flag captured

Why train here

Practice like it's real. Progress like it counts.

TARGET_01

Practice real attack paths

Work through web flaws, weak crypto, recon trails, files, binaries, and forensics without touching a live target.

TARGET_02

Build proof of progress

TARGET_03

Start easy, level up fast

Move from beginner wins into harder investigations as your process and confidence improve.

Challenge coverage

Every challenge teaches a security skill.

Cryptography

crypto

Decode, compare, brute force, and spot implementation mistakes.

$ echo "Sjc3e3gwcl9pc19ub3RfZW5jfQ==" | base64 -d
J77{x0r_is_not_enc}

{;}

Web Exploitation

web

Exploit realistic application bugs and broken access controls.

$ curl -s target/api/user/1337 -H "Role: admin"
HTTP/1.1 200 OK ← access control? broken.

</>

Forensics

dfir

Inspect packets, files, traces, and hidden evidence.

$ exiftool suspect.jpg | grep -i comment
Comment : check the LSB channel...

.pcap

Reverse Engineering

rev

Pull apart logic, scripts, binaries, and suspicious behavior.

$ strings ./crackme | grep -i pass
cmp_input_to: 0x7f3a... ← follow the jump

0x7F

In the pipeline: leaderboards and more series are on the roadmap.

Your next flag is waiting

Register once. Keep every point

Guest mode is good for a look around. A profile is where the Arena becomes yours: points, progress, certificates, and a record of what you can actually do.

Start the arena