Broken Auth.api is now a Medium Rank Challenge

Broken Auth.api has officially earned its promotion to a Medium-difficulty challenge, and the numbers justify it. With a patch success rate of just 1%, this challenge has consistently exposed subtle but critical flaws in authentication logic that evade superficial fixes.

Participants are tasked with diagnosing and remediating a real-world authentication failure scenario, where naïve changes often introduce new bypasses or fail under adversarial conditions.

If you believe you can do better, now is your chance. Take on the Broken Auth.api challenge, apply a robust fix, and prove your AppSec skills by securing your position on the Holiday Wargame leaderboard.

Think you can fix it properly? Give it a shot.

Try it now in the Holiday 7x7 Wargame