What this is

A tool for learning to spot security bugs. You get one vulnerable snippet at a time. Find the flaw, then see what went wrong and why.

Each snippet is tagged with a vulnerability type, CWE, severity, and difficulty so you know exactly where to focus.

Privacy

No accounts, no tracking, no cookies. Your progress (streak, accuracy, snippets seen) is stored only in your browser's local storage and never leaves your device.

Terms

For learning only. Don't test systems you don't own or have permission to test.

Content is provided as-is, not professional security advice. We're not liable for how you use it.