Labs › Web Red team

Skeleton Key, CVE-2023-27524 Simulation

Walk a real CVE (Superset auth bypass) from discovery to a working exploit.

advanced CVE-2023-27524auth bypassexploitation +150 HC 1.0/5 rated difficulty

0 / 9 challenges solved

What you'll work through

9 steps

1 Challenge 0 : Briefing

2 Challenge 1 : First Probe

3 Challenge 2 : Full Fingerprint

4 Challenge 3 : Surface Discovery

5 Challenge 4 : Header Analysis

6 Challenge 5 : Nuclei, First Scan

7 Challenge 6 : Finding the Secret Key

8 Challenge 7 : Forging a Session Cookie

9 Challenge 8 : Writing a Detection Template

1.0 / 5 from 1 finisher

1.0/5

5 0

4 0

3 0

2 0

1 1

1 is a warm-up, 5 is brutal. Only people who solved every challenge can rate.

4.0 ★ · 1 review

{{ 7 * 7 }} ★★★★☆

👍