🔗 Public link:

🏆

x-pex's Certificates

2 / 134 earned

✦ CERTIFIED

🏆 Nightfall

elite machine

Issued 17 Oct 2026

View Certificate →

✦ CERTIFIED

🏆 Bastion

elite machine

Issued 14 Oct 2026

View Certificate →

Relay

standard Easy

0/2 flags

Own this machine to earn the cert.

Axferia

standard Easy

0/2 flags

Own this machine to earn the cert.

Listeria

standard Easy

0/2 flags

Own this machine to earn the cert.

Bindforge

standard Medium

0/2 flags

Own this machine to earn the cert.

Rootbase

standard Medium

0/2 flags

Own this machine to earn the cert.

Keyspace

elite Hard

0/2 flags

Own this machine to earn the cert.

Driftsync

standard Medium

0/2 flags

Own this machine to earn the cert.

Bifrost

elite Hard

0/2 flags

Own this machine to earn the cert.

Postmark

standard Medium

0/2 flags

Own this machine to earn the cert.

Walkabout

standard Medium

0/2 flags

Own this machine to earn the cert.

Switchgear

standard Medium

0/2 flags

Own this machine to earn the cert.

DeployStation

standard Medium

0/2 flags

Own this machine to earn the cert.

✦ CERTIFIED

Bastion

elite Hard

2/2 flags

View Certificate →

✦ CERTIFIED

Nightfall

elite Hard

2/2 flags

View Certificate →

Sidewinder

standard Medium

1/2 flags

Get the remaining flag to unlock.

Retrogate

standard Easy

0/2 flags

Own this machine to earn the cert.

Bootleak

standard Easy

0/2 flags

Own this machine to earn the cert.

CORP-DC01

elite Hard

1/2 flags

Get the remaining flag to unlock.

CORP-WS01

elite Hard

0/2 flags

Own this machine to earn the cert.

MEGACORP-DC01

legendary Hard

0/2 flags

Own this machine to earn the cert.

MEGACORP-WS01

elite Hard

0/2 flags

Own this machine to earn the cert.

Neuravex

standard Easy

0/2 flags

Own this machine to earn the cert.

Injectrix

standard Medium

0/2 flags

Own this machine to earn the cert.

Stacksmash

elite Hard

0/2 flags

Own this machine to earn the cert.

The XSS Rat

legendary Insane

0/2 flags

Own this machine to earn the cert.

RatHole

standard Medium

0/2 flags

Own this machine to earn the cert.

Loophole

standard Medium

0/2 flags

Own this machine to earn the cert.

Sharehouse

standard Medium

0/2 flags

Own this machine to earn the cert.

Porthaven

standard Easy

0/2 flags

Own this machine to earn the cert.

Glasswork

standard Medium

0/2 flags

Own this machine to earn the cert.

Irongrep

standard Medium

0/2 flags

Own this machine to earn the cert.

Shellcast

standard Easy

0/2 flags

Own this machine to earn the cert.

Darkpulse

legendary Insane

0/2 flags

Own this machine to earn the cert.

Foxhole

standard Medium

0/2 flags

Own this machine to earn the cert.

Tracewire

elite Hard

0/2 flags

Own this machine to earn the cert.

VAULTNET-DC01

legendary Hard

0/2 flags

Own this machine to earn the cert.

VAULTNET-WS01

elite Hard

0/2 flags

Own this machine to earn the cert.

VAULTNET-DB01

elite Hard

0/2 flags

Own this machine to earn the cert.

Tempest

standard Medium

0/2 flags

Own this machine to earn the cert.

Docparse

standard Medium

0/2 flags

Own this machine to earn the cert.

Jailkey

standard Medium

0/2 flags

Own this machine to earn the cert.

Hexvault

legendary Insane

0/2 flags

Own this machine to earn the cert.

Codebleed

standard Easy

0/2 flags

Own this machine to earn the cert.

Capsule

elite Hard

0/2 flags

Own this machine to earn the cert.

Debugtrap

elite Hard

0/2 flags

Own this machine to earn the cert.

StackDrop

standard Medium

0/2 flags

Own this machine to earn the cert.

DarkRat

legendary Exceptional

0/2 flags

Own this machine to earn the cert.

Mirage

legendary Exceptional

0/2 flags

Own this machine to earn the cert.

Axiom

standard Easy

0/2 flags

Own this machine to earn the cert.

Inkblot

standard Easy

0/2 flags

Own this machine to earn the cert.

Blindspot

standard Medium

0/2 flags

Own this machine to earn the cert.

TokenSmith

elite Hard

0/2 flags

Own this machine to earn the cert.

Threadbare

elite Hard

0/2 flags

Own this machine to earn the cert.

Breakout

elite Hard

0/2 flags

Own this machine to earn the cert.

Shapeshifter

standard Medium

0/2 flags

Own this machine to earn the cert.

Synapse

standard Medium

0/2 flags

Own this machine to earn the cert.

NullSecurityX Lab

elite Hard

0/2 flags

Own this machine to earn the cert.

SolarGate

standard Easy

0/2 flags

Own this machine to earn the cert.

Meridian Hub

standard Easy

0/2 flags

Own this machine to earn the cert.

VoltCore

standard Medium

0/2 flags

Own this machine to earn the cert.

GridLock

standard Medium

0/2 flags

Own this machine to earn the cert.

Apex

elite Hard

0/2 flags

Own this machine to earn the cert.

CIRT Gateway

standard Easy

0/2 flags

Own this machine to earn the cert.

SIEM Station

standard Easy

0/2 flags

Own this machine to earn the cert.

SOC Runbook

standard Medium

0/2 flags

Own this machine to earn the cert.

Vuln Code Depot

standard Medium

0/2 flags

Own this machine to earn the cert.

Under Fire

elite Hard

0/2 flags

Own this machine to earn the cert.

Switchboard FTP

standard Easy

0/2 flags

Own this machine to earn the cert.

Switchboard Relay

standard Easy

0/2 flags

Own this machine to earn the cert.

Switchboard Cache

standard Medium

0/2 flags

Own this machine to earn the cert.

Switchboard Sync

standard Medium

0/2 flags

Own this machine to earn the cert.

Switchboard Monitor

elite Hard

0/2 flags

Own this machine to earn the cert.

Blacksite DB

standard Easy

0/2 flags

Own this machine to earn the cert.

Blacksite Tools

standard Easy

0/2 flags

Own this machine to earn the cert.

Blacksite Media

standard Medium

0/2 flags

Own this machine to earn the cert.

Blacksite Reports

standard Medium

0/2 flags

Own this machine to earn the cert.

Blacksite Import

elite Hard

0/2 flags

Own this machine to earn the cert.

Pipeline Git

standard Easy

0/2 flags

Own this machine to earn the cert.

Pipeline Env

standard Easy

0/2 flags

Own this machine to earn the cert.

Pipeline Registry

standard Medium

0/2 flags

Own this machine to earn the cert.

Pipeline Artifact

standard Medium

0/2 flags

Own this machine to earn the cert.

Pipeline Runner

elite Hard

0/2 flags

Own this machine to earn the cert.

Assembly Line

elite Hard

0/2 flags

Own this machine to earn the cert.

API Users

standard Easy

0/2 flags

Own this machine to earn the cert.

API Profile

standard Easy

0/2 flags

Own this machine to earn the cert.

API Auth

standard Medium

0/2 flags

Own this machine to earn the cert.

API Admin

standard Medium

0/2 flags

Own this machine to earn the cert.

API Fetch

elite Hard

0/2 flags

Own this machine to earn the cert.

Vault Keygen

standard Easy

0/2 flags

Own this machine to earn the cert.

Vault Session

standard Easy

0/2 flags

Own this machine to earn the cert.

Vault Verify

standard Medium

0/2 flags

Own this machine to earn the cert.

Vault Encrypt

standard Medium

0/2 flags

Own this machine to earn the cert.

Vault PKI

elite Hard

0/2 flags

Own this machine to earn the cert.

Container Caps

standard Easy

0/2 flags

Own this machine to earn the cert.

Container Env

standard Easy

0/2 flags

Own this machine to earn the cert.

Container Mount

standard Medium

0/2 flags

Own this machine to earn the cert.

Container Socket

standard Medium

0/2 flags

Own this machine to earn the cert.

Container Escape

elite Hard

0/2 flags

Own this machine to earn the cert.

Lane: Ret2Win

standard Easy

0/2 flags

Own this machine to earn the cert.

Lane: Shellcode

standard Easy

0/2 flags

Own this machine to earn the cert.

Lane: ROP Chain

standard Medium

0/2 flags

Own this machine to earn the cert.

Lane: Format Str

standard Medium

0/2 flags

Own this machine to earn the cert.

Lane: Heap

elite Hard

0/2 flags

Own this machine to earn the cert.

Corp Headers

standard Easy

0/2 flags

Own this machine to earn the cert.

Corp Webcrawl

standard Easy

0/2 flags

Own this machine to earn the cert.

Corp Docs

standard Medium

0/2 flags

Own this machine to earn the cert.

Corp Logs

standard Medium

0/2 flags

Own this machine to earn the cert.

Corp OSINT

elite Hard

0/2 flags

Own this machine to earn the cert.

GraphLeak

elite Hard

0/2 flags

Own this machine to earn the cert.

Turnstile

standard Easy

0/2 flags

Own this machine to earn the cert.

Nightglass

standard Medium

0/2 flags

Own this machine to earn the cert.

Crossfire

standard Easy

0/2 flags

Own this machine to earn the cert.

Ledgerloop

standard Easy

0/2 flags

Own this machine to earn the cert.

Handoff

elite Hard

0/2 flags

Own this machine to earn the cert.

Cacheleak

standard Easy

0/2 flags

Own this machine to earn the cert.

IronClad

standard Medium

0/2 flags

Own this machine to earn the cert.

RatSuite

elite Hard

0/2 flags

Own this machine to earn the cert.

MedBridge

standard Medium

0/2 flags

Own this machine to earn the cert.

FinTrust

standard Medium

0/2 flags

Own this machine to earn the cert.

Broadscope

standard Medium

0/2 flags

Own this machine to earn the cert.

Echo

standard Easy

0/2 flags

Own this machine to earn the cert.

Lockpick

standard Medium

0/2 flags

Own this machine to earn the cert.

Bounty Board

elite Hard

0/2 flags

Own this machine to earn the cert.

🕸️

Web Fundamentals

HTTP exposure, directory traversal, XSS, SSTI, and XXE — the OWASP core from first principles.

0 / 5 machines 0%

elite

📡

Network Recon

DNS zone transfers, SNMP community strings, rsync exposure, NFS misconfig. The network as attack surface.

0 / 4 machines 0%

elite

🔓

Auth Breaker

LDAP injection, JWT algorithm confusion, OAuth flows — break the authentication layer end to end.

0 / 3 machines 0%

elite

🗄️

Database Exploiter

MySQL injection, Redis command abuse, SMB shares. Exfiltrate, pivot, and escalate through the data layer.

0 / 3 machines 0%

elite

💀

Binary Exploiter

Stack-based buffer overflows and ret2libc chains. Low-level exploitation is a rare and respected skillset.

0 / 2 machines 0%

legendary

🏢

The Corp Network

Two interconnected Windows domains — CorpNet and MegaCorp. Enumerate shares, pivot users, own the DCs.

0 / 4 machines 0%

legendary

🏦

VaultNet Breach

Three-machine AD network — DC, database server, workstation. Full domain compromise from zero to domain admin.

0 / 3 machines 0%

legendary

☠️

The Infection Arc

Collect all five fragments scattered across live labs. The full infection story.

0 / 5 machines 0%

legendary

🕷️

Advanced Web

SSRF, prototype pollution, race conditions, log poisoning — the tricky second tier of web exploitation.

0 / 4 machines 0%

legendary

🐀

The Full Rat

Own any 20 distinct machines. Breadth over depth — prove you can operate across the full attack surface.

2 / 20 machines 10%

Own any 20 distinct machines.

elite

👑

RatCTF Master

Every active machine owned. The completionist crown — given to those who leave nothing standing.

2 / 123 active machines 2%

Own every active machine on the platform.

legendary