Skip to content
Breakpoint logobreakpoınt

Intigriti Monthly Challenge

Find a web bug in a new challenge page each month and capture the flag

Each month the bug bounty platform Intigriti puts up a small web app with a hidden vulnerability, often XSS. You have about a week to find a working exploit on the challenge page and capture a flag in the form INTIGRITI{...}. Self-XSS and man-in-the-middle tricks do not count, and the payload must work in the latest Chrome.

Play on challenge.intigriti.io

Free · Login needed · Browser · Advanced

About Intigriti Monthly Challenge

The challenges train web exploitation skills used in real bug hunting, such as bypassing filters and abusing client-side code. They suit experienced web hackers. Past challenges and community write-ups are a good way to study between rounds.

You can try the challenge page in the browser without an account, but you need a free Intigriti account to submit your flag, payload and steps. Seven winners per round get swag vouchers, and you can enter a write-up contest.

Made this game? Claim it →

Keyboard shortcuts

j / k
Move down / up the list (this page)
] / [
Next / previous page
o
Open the focused game
b
Save or unsave the focused game
/
Search (the home list, or the command palette elsewhere)
Ctrl K
Command palette: games, skills, pages (works even when single keys are off)
?
This help