🐀🐀 0 pts earned

RatBAC Dojo

🧩 Dojos

🖧 AD Network — Dojos

RatBAC Dojo RatXSS Dojo

A Broken Access Control training range. Log in as a low-privilege user and hunt every missing 401/403: forced browsing, IDOR, mass assignment, horizontal and vertical escalation across users, orgs (tenants) and plans, ending in a perimeter '403' filter you bypass to reach the admin console. Accounts alice/bob/carol/admin, password 'password'.

Target IP Log in to reveal

User Flag Pending

Root Flag Pending

Community

Community Hints

Grade A · 1000 pts Grade B · 700 pts Grade C · 400 pts Grade D · 200 pts + 150 credits on accept

Short, stage-specific nudges — directional, spoiler-light, no exact commands.

No community hints yet — be the first to add one!

Community

Community Walkthroughs

Grade A · 2500 pts Grade B · 1750 pts Grade C · 1000 pts Grade D · 500 pts + 300 credits on accept

🔒 Community walkthroughs are spoilers — capture the root flag on this machine to unlock them.