Intigriti Monthly Challenge
Find a web bug in a new challenge page each month and capture the flag
Each month the bug bounty platform Intigriti puts up a small web app with a hidden vulnerability, often XSS. You have about a week to find a working exploit on the challenge page and capture a flag in the form INTIGRITI{...}. Self-XSS and man-in-the-middle tricks do not count, and the payload must work in the latest Chrome.
Free · Login needed · Browser · Advanced
About Intigriti Monthly Challenge
The challenges train web exploitation skills used in real bug hunting, such as bypassing filters and abusing client-side code. They suit experienced web hackers. Past challenges and community write-ups are a good way to study between rounds.
You can try the challenge page in the browser without an account, but you need a free Intigriti account to submit your flag, payload and steps. Seven winners per round get swag vouchers, and you can enter a write-up contest.
Made this game? Claim it →

Tips and discussion
No tips yet.
Sign in to share a tip.