Home


Welcome on W3Challs,

W3Challs is a penetration testing training platform, which offers various computer challenges, in categories related to security: Hacking, Cracking, Wargame, Forensic, Cryptography, Steganography et Programming.

The purpose of this site is to offer realistic challenges, without simulation, and without guessing!

We give you an opportunity to test your skills against our challenges, and even to try to hack the site itself.
Nevertheless, bruteforcing (of challenges, authentication...) or any Denial of Service are forbidden!
You have to be registered to access challenges.

Good visit!



Last news

Last news :

New design (awe, the 23/02/2013 at 23h22)Comments (0)
You may have noticed, there is a new site design, even though the layout is globally unchanged.
Instead of a long description of each modification (there are almost everywhere), I'll let you discover it by yourself.

If fixed a few bugs too. If you have any comment or bug to rise up, please answer in the thread attached to this news.

Furthermore, 2 challenges were fully updated:
  • Flash protection (cracking) becomes My Little Pony CEH. Thanks agix!
  • Fingerprinting (crypto) becomes Shadow.
For beginners, a section describing categories, what to expect from it and how to begin has been added to the about page.

Happy new year 2013! (awe, the 01/01/2013 at 23h59)Comments (0)
Happy new year 2013 to everyone!

To celebrate it, ThunderLord offers you a new hardcore crypto challenge ;)
If ThunderHash was too easy for you, come and test your skills against TES (ThunderLord Encryption Standard?).

Thanks ThunderLord!

/dev/nullization of several challenges (awe, the 15/10/2012 at 21h00)Comments (0)
Hey,

This news will probably make some people unhappy, but that's a necessary step to improve the site, and continue to follow the « hacking-spirit » we try to establish in our challenges.

16 challenges (yeah, that's quite a lot) were moved to the /dev/null category, which means they are now worth 0 points.

For more infos, read this thread. (you might need to gtranslate).
Several details are still to be fixed, as the thread explains, and should be established as soon as possible.

My condolences to those that cared about their points, achievement of hard work, but well, you should consider that challenges' purpose is essentially to learn and have fun, so if we remove these challenges, that's because we consider it is "for the greater good". These challenges are anyway still available within the /dev/null category.

See you, next news will hopefully bring *new* challenges :)

Beach pwning (awe, the 21/07/2012 at 23h07)Comments (0)
Hi,

A few news about the hacking server:
  • Challenge A basic vulnerability, re-developped from scratch, a tiny bit more subtile but sources are provided this time
  • Challenge Authentication, modified to remove all guessy elements
You don't have any pretext to whine and cry it's guessing from now.
I'm listening if you have any suggestion about modifying other challenges (including other categories of course).
Several challenges are likely to be modified soon.
Also, all hacking challenges addresses were changed to become host-based, instead of port-based like previously. It should be a great news for those blocked by their corporate firewall :)

Well, let's present *real* news, heavy hacking challenges :)
  • JohnDog - Hacking - by S3cur3D. (Ed: java sux, you'll soon have another proof :))
  • VIP Web Army II - Hacking - by agix
You have your holiday homework, enjoy spare time and sun to pwn in your cavern :]

Huge thanks to S3cur3D and agix for their challs, and to eLz for betatest.

Have fun !

Kiss my hash, droid! (awe, the 18/05/2012 at 20h59)Comments (0)
2 new challenges to complicate things a lot on 2 categories!

ThunderHash, crypto by ThunderLord.
Android Persistent Threat, forensic by MaZ.

Have fun, & collisions :)

Thanks ThunderLord and MaZ!