Practice Arena

An opaque decision engine can be persuaded to reveal its inner logic if you understand how it thinks.

A high-security database won’t reveal its secrets directly, but it reacts just enough to careful probing.

Encrypted industrial commands reveal patterns that can be turned against the system itself.

A custom communication protocol stands between you and privileged access to an orbital system.

A debugging feature meant for engineers quietly weakens the system’s core trust mechanism.

A public dashboard shows high-level seizure statistics. The interface blocks direct lookups, but there’s more data behind the scenes. Understanding how the dashboard works could open up new information.

A report download page for researchers. Everything seems normal, but there’s extra information sent along with the report that isn’t visible on the page. Checking the traffic might reveal it.

A smart city interface struggles to agree on which device it’s actually talking to.

An autonomous system trusts user input a little too much, with consequences for who’s really in control.

The office system trusts paperwork a little too much. Some tokens look official at a glance, but the validation isn’t thorough. Inspect what’s happening behind the scenes and see if you can work with it.

A patrol planning service lets analysts submit formulas to score risk across different routes. It promises to safely handle anything you submit, but not everything may be as restricted as it seems. Explore what the engine accepts and how it works — the proof is hidden somewhere in the data it produces.

A calm SDG 15 page with a speech about climate conservation. Something is tucked away in the page or its resources. Pay attention to the details — the answer is there if you look closely.

An outdated piece of infrastructure still remembers how it was first set up, and it never forgot its secrets.

You’re at a ranger station website showing conservation data. Most of it is public, but there’s a part that looks like it’s not meant for everyone. Explore carefully and see what you can uncover.

A logistics dashboard tells a clean public story, but the real picture is hiding just beneath the surface.

A neglected industrial control panel exposes more than it should to anyone who knows how to speak to it properly.