The XSS Rat Training Grounds

Own every lab. Master the methodology.

Training machines built by The XSS Rat — from basic enumeration to extreme multi-vector chains. Register once, unlock targets, submit flags, and track your progress on the leaderboard.

Active Challenges 110
IP Visibility Locked Until Login
โ˜  The Burrow 8 reached it Can you?

๐Ÿฅท New Track โ€” Dropping today

The OSEP Track is here

Where OSCP ends and the red team begins โ€” advanced evasion and chaining for PEN-300. Restricted-shell breakouts, filter & defense evasion, lateral movement & pivoting, advanced Active Directory, and insecure deserialization. Three brand-new machines โ€” Bastion, Nightfall, and Sidewinder โ€” release in 4 hours. Free.

Explore the OSEP Track โ†’ Getting a shell isn't enough here. Get it past the defences.

โšก New Series โ€” Launching 31 May 2026

Project Meridian

5 new OSCP-prep machines inside SolarGate Energy's network. SUID abuse, cron hijacking, sudo escapes, and Linux capabilities โ€” a full Linux privesc series.

View Project Meridian โ†’ ๐Ÿ’ก Community suggestion by tumtum

Dropping in

--days
:
--hrs
:
--min
:
--sec

๐Ÿ›ก Purple Team Series โ€” Launching 20 Jun 2026

Help me, I got compromised

Five connected hosts. One breach. Log forensics, SOC triage, code review, and a host under constant attack that you must defend โ€” with a 30-minute auto-reset.

Dropping in

--days
:
--hrs
:
--min
:
--sec

๐Ÿ”ฅ 8 New Series โ€” Launching 1 Sep 2026

40 new machines across 8 themed series

Operation Switchboard, Blacksite Webapp, Pipeline Breach, Exposed API, Cryptovault, Containment Failure, Memory Lane, and Social Engineering Sim โ€” network protocols, web vulns, CI/CD, API attacks, crypto, container escapes, binary exploitation, and OSINT chains.

Dropping in

--days
:
--hrs
:
--min
:
--sec

Community Hub

๐Ÿ“š Latest writeups, reports & resources

Open the Hub โ€” view all โ†’

Top Players

View full leaderboard