Home
Welcome on W3Challs,
W3Challs is a penetration testing training platform, which offers various computer challenges, in categories related to security: Hacking, Cracking, Wargame, Forensic, Cryptography, Steganography et Programming.
The purpose of this site is to offer realistic challenges, without simulation, and without guessing!
We give you an opportunity to test your skills against our challenges, and even to try to hack the site itself.
Nevertheless, bruteforcing (of challenges, authentication...) or any Denial of Service are forbidden!
You have to be registered to access challenges.

Last news :
You may have noticed, there is a new site design, even though the layout is globally unchanged.
Instead of a long description of each modification (there are almost everywhere), I'll let you discover it by yourself.
If fixed a few bugs too. If you have any comment or bug to rise up, please answer in the thread attached to this news.
Furthermore, 2 challenges were fully updated:
- Flash protection (cracking) becomes My Little Pony CEH. Thanks agix!
- Fingerprinting (crypto) becomes Shadow.
Happy new year 2013 to everyone!
To celebrate it, ThunderLord offers you a new hardcore crypto challenge

If ThunderHash was too easy for you, come and test your skills against TES (ThunderLord Encryption Standard?).
Thanks ThunderLord!
Hey,
This news will probably make some people unhappy, but that's a necessary step to improve the site, and continue to follow the « hacking-spirit » we try to establish in our challenges.
16 challenges (yeah, that's quite a lot) were moved to the /dev/null category, which means they are now worth 0 points.
For more infos, read this thread. (you might need to gtranslate).
Several details are still to be fixed, as the thread explains, and should be established as soon as possible.
My condolences to those that cared about their points, achievement of hard work, but well, you should consider that challenges' purpose is essentially to learn and have fun, so if we remove these challenges, that's because we consider it is "for the greater good". These challenges are anyway still available within the /dev/null category.
See you, next news will hopefully bring *new* challenges

Hi,
A few news about the hacking server:
- Challenge A basic vulnerability, re-developped from scratch, a tiny bit more subtile but sources are provided this time
- Challenge Authentication, modified to remove all guessy elements
I'm listening if you have any suggestion about modifying other challenges (including other categories of course).
Several challenges are likely to be modified soon.
Also, all hacking challenges addresses were changed to become host-based, instead of port-based like previously. It should be a great news for those blocked by their corporate firewall

Well, let's present *real* news, heavy hacking challenges

- JohnDog - Hacking - by S3cur3D. (Ed: java sux, you'll soon have another proof
) - VIP Web Army II - Hacking - by agix
Huge thanks to S3cur3D and agix for their challs, and to eLz for betatest.
Have fun !
2 new challenges to complicate things a lot on 2 categories!
ThunderHash, crypto by ThunderLord.
Android Persistent Threat, forensic by MaZ.
Have fun, & collisions

Thanks ThunderLord and MaZ!

Blog
VM Hacking
Hacking
Cracking
Wargame
Forensic
Cryptography
Steganography
Programming
/dev/null
Voir les archives des news


