Members
| User Name | Score |
| Jaroslav | 6600 |
| martincajka | 5250 |
| Mirek | 5070 |
Awards
Hint 419
hints
Hint for SSRF
-135
Hint 475
hints
Hint for CSRF
-45
Solves
| Challenge | Category | Value | Time |
| Login Bjoern | Broken Authentication | 700 | |
| Leaked Access Logs | Sensitive Data Exposure | 1000 | |
| User Credentials | Injection | 700 | |
| Login Bender | Injection | 450 | |
| Reset Bender's Password | Broken Authentication | 700 | |
| Forgotten Sales Backup | Sensitive Data Exposure | 700 | |
| SSRF | Broken Access Control | 1350 | |
| Reset Morty's Password | Broken Anti Automation | 1000 | |
| Extra Language | Broken Anti Automation | 1000 | |
| Nested Easter Egg | Cryptographic Issues | 700 | |
| Allowlist Bypass | Unvalidated Redirects | 700 | |
| Exposed Metrics | Sensitive Data Exposure | 100 | |
| Outdated Allowlist | Unvalidated Redirects | 100 | |
| Easter Egg | Broken Access Control | 700 | |
| Login MC SafeSearch | Sensitive Data Exposure | 250 | |
| Bonus Payload | XSS | 100 | |
| Blockchain Hype | Security through Obscurity | 1000 | |
| DOM XSS | XSS | 100 | |
| Product Tampering | Broken Access Control | 450 | |
| Admin Registration | Improper Input Validation | 450 | |
| Exposed credentials | Sensitive Data Exposure | 250 | |
| Manipulate Basket | Broken Access Control | 450 | |
| Mass Dispel | Miscellaneous | 100 | |
| Forged Review | Broken Access Control | 450 | |
| Bully Chatbot | Miscellaneous | 100 | |
| View Basket | Broken Access Control | 250 | |
| Five-Star Feedback | Broken Access Control | 250 | |
| Password Strength | Broken Authentication | 250 | |
| Admin Section | Broken Access Control | 250 | |
| Login Admin | Injection | 250 | |
| Web3 Sandbox | Broken Access Control | 100 | |
| Privacy Policy | Miscellaneous | 100 | |
| Missing Encoding | Improper Input Validation | 100 | |
| Empty User Registration | Improper Input Validation | 250 | |
| Error Handling | Security Misconfiguration | 100 | |
| Forged Feedback | Broken Access Control | 450 | |
| Score Board | Miscellaneous | 100 | |
| Meta Geo Stalking | Sensitive Data Exposure | 250 | |
| CAPTCHA Bypass | Broken Anti Automation | 450 | |
| Visual Geo Stalking | Sensitive Data Exposure | 250 | |
| Zero Stars | Improper Input Validation | 100 |