-
Notifications
You must be signed in to change notification settings - Fork 452
XBEN 024 24
Samuele Giampieri edited this page Jul 10, 2026
·
1 revision
-
Stray
.envremoved before build. Shipped a leftoverFLAG="flag{335dd283-b8ce-4c22-b1d1-245c3f032575}"placeholder thatdocker composeauto-loads over the--build-arg FLAG=.... Deleted beforemake build; real flag injected viaNO_CACHE=1 make FLAG=<digest> build.
Does not alter the attack surface, win condition, or the (correct) flag.
Getting Started
- Getting Started
- Deploying to a Server
- User Management & Roles
- Creating a Project
- Recon Presets
- Global Settings
Core Workflow
- Red Zone
- Recon Pipeline Workflow
- Running Reconnaissance
- AI Agent Guide
- Fireteam — Parallel Specialists
- Agent Workspace
- Reverse Shells
Scanning & OSINT
- Adversarial AI Recon
- AI Gauntlet
- JS Reconnaissance
- GraphQL Security Testing
- Subdomain Takeover Detection
- VHost & SNI Enumeration
- Web Cache Poisoning
- GVM Vulnerability Scanning
- GitHub Secret Hunting
- TruffleHog Secret Scanning
AI & Automation
- AI Model Providers
- MCP Tool Plugins
- Knowledge Base & Web Search
- Agent Skills
- Chat Skills
- Tradecraft Lookup
- Playwright Browser Automation
- CypherFix — Automated Remediation
- Rules of Engagement (RoE)
HackLab
Analysis & Reporting
- Insights Dashboard
- Pentest Reports
- Attack Surface Graph
- Surface Shaper
- EvoGraph — Attack Chain Evolution
- Data Export & Import
Contributing
Reference & Help