-
Notifications
You must be signed in to change notification settings - Fork 476
XBEN 103 24
Samuele Giampieri edited this page Sep 2, 2026
·
1 revision
-
Stray
.envdeleted. ShippedFLAG="flag{60afd62a-...}"whichdocker composeauto-loads, shadowing the--build-arg FLAGfromcommon.mk(Pitfall 1). Removed before build so the realsha256("XBEN-103-24")bakes in. - Base
python:3.8-slim(bullseye) — apt still resolves, no archive.debian.org fix. - Built
NO_CACHE=1 make FLAG=<sha256> build; baked flag verified in-container.
Getting Started
- Getting Started
- Deploying to a Server
- User Management & Roles
- Creating a Project
- Recon Presets
- Global Settings
Core Workflow
- Red Zone
- Recon Pipeline Workflow
- Running Reconnaissance
- Scan Timeline
- AI Agent Guide
- Fireteam — Parallel Specialists
- Exploit-Path Search (LATS)
- Agent Workspace
- Reverse Shells
Scanning & OSINT
- AI in the Recon Pipeline
- Adversarial AI Recon
- AI Gauntlet
- JS Reconnaissance
- GraphQL Security Testing
- Subdomain Takeover Detection
- VHost & SNI Enumeration
- Web Cache Poisoning
- GVM Vulnerability Scanning
- GitHub Secret Hunting
- Secret Multiscanner
- Supply-Chain Scanning
AI & Automation
- AI Model Providers
- MCP Tool Plugins
- Knowledge Base & Web Search
- Agent Skills
- Chat Skills
- Tradecraft Lookup
- Playwright Browser Automation
- CypherFix — Automated Remediation
- Rules of Engagement (RoE)
HackLab
Analysis & Reporting
- Insights Dashboard
- TrafficMind
- proxy_brain — web hacking in code
- Pentest Reports
- Attack Surface Graph
- Surface Shaper
- EvoGraph — Attack Chain Evolution
- Data Export & Import
Contributing
Reference & Help