hackerocean

Hands-on hacking labs.

Free, in-browser labs and CTF across web, crypto, forensics and more — crack the flag, earn Fathoms, climb Surface → Hadal. No VPN, no setup.

5 challenges available

Web

Leaky Cookie

A session cookie is missing the flag that stops JavaScript from reading it.

0 solves

Ghost in the Params

The staff API hands out records by id with no authorization. Climb to the top.

0 solves

Spin Cycle

An intercepted note has been rotated. Spin it back.

0 solves

Intercepted

A transmission was captured, but it is only encoded — not encrypted.

0 solves

hard soon

RSA Twins

Two moduli, one shared prime. Factor them both.

Evidence Dump

A raw hex dump was pulled from disk. Carve the flag out.

0 solves

hard soon

Flat Earth

The binary is packed. Restore it and read the secret.

insane soon

Abyssal Overflow

No canary, known libc. Redirect execution.