FAQ

Practical answers. If a machine is not listed as open, it is not open.

What is a lab?

A realistic web assessment. You are after the findings and the flags. Rooting the host is not the goal, and there is no leaderboard.

When do machines open?

They are planned by the end of the year. None are open on this site yet. WebPentester is where that is announced. Find me as @echoes_of_whoami.

Which labs are free, and which are paid?

Some labs are free. Some are paid per lab. This site does not sell a subscription. When a lab has a price, that price is on its page.

Where does the lab run?

When a machine is open, its page links to CourseStack. That is where the lab is actually solved. This site explains the project and lists the machines. It does not know whether you solved a box.

When do source and patch notes appear?

After a machine, some labs get a section on the source: why it was vulnerable and how to patch it. That section is part of the lab page when it is published. It is not automatic for every box.

Is this only web?

Yes. Web only, from beginner through advanced.