🎄 Join our Annual Holiday wargame and win prizes!


New Challenges Released

12/02/2026

Holiday Wargame Challenges(2)

The Holiday Wargame 2025 may have concluded, but the challenges released are now available in our Catalog for you to try:

  1. MCP Tool Shadowing.ai
  2. MCP Tool Collision.ai
  3. OAuth.py
  4. React XSS.js
  5. Null Pointer Dereference.cpp
  6. Lost Baggage.rb :star:
  7. Compare.go
  8. Target Code.github
  9. Arbitrage.move :star:
  10. Snowflake.go
  11. Broken Auth.api
  12. DoS GraphQL.ts
  13. CSP.ts
  14. CSP.js
  15. CSRF.php

Trending Incidents:

  1. React2Shell.ir
  2. Shai Hulud.ir
  3. MongoBleed.cpp

Cloud:

  1. Cosmosdb CMK.azure
  2. Big Table.gcp
  3. Key Expiration.azure
  4. Cloud SQL.gcp
  5. VPC.gcp
  6. Disallow CORS.azure

Attack and Defence:

  1. Anahita.py.hth
  2. Solar.php.hth
  3. Command.cpp.hth

Coming Soon

  1. HackMe Justice.web
  2. HackMe Password.web
Deco line
Deco line

Play AppSec WarGames

Want to skill-up in secure coding and AppSec? Try SecDim Wargames to learn how to find, hack and fix security vulnerabilities inspired by real-world incidents.

For Companies Play Now
Deco line
Deco line

Got a comment?

Join our secure coding and AppSec community. A discussion board to share and discuss all aspects of secure programming, AppSec, DevSecOps, fuzzing, cloudsec, AIsec code review, and more.

Read more