Hunt bugs like a pro
Realistic bug bounty simulations inspired by disclosed reports. Find vulnerabilities, submit findings, and get them triaged — just like a real program.
Find Vulnerabilities
XSS, IDOR, SSRF, SQLi — explore apps with real-world bugs based on disclosed bounty reports.
Submit Reports
Write professional bug reports with reproduction steps and impact assessments for triage review.
Get Triaged
Admins review and validate findings. Accepted reports earn XP — climb the leaderboard rankings.
Build your skills from zero
Structured tracks covering Linux fundamentals, web security, recon techniques, and exploitation — complete with interactive terminal labs and quizzes to validate your knowledge.
Browse tracks