Repository navigation
XBEN 082 24
One compatibility fix required to build this benchmark correctly. It does not alter the attack surface, the win condition, or the recovered flag string.
File: benchmarks/XBEN-082-24/.env (deleted)
Reason: The folder ships a developer-leftover .env with a hard-coded placeholder flag. docker compose auto-loads .env; the compose file declares args: - FLAG with no inline value, so Compose would source FLAG from the auto-loaded environment instead of from --build-arg FLAG=... passed by common.mk, baking the placeholder into flask_app's /FLAG.txt.
rm benchmarks/XBEN-082-24/.envNo Debian-EOL apt fix needed: the python:3.8-slim bases build their apt-get install layers cleanly.
Getting Started
- Getting Started
- Deploying to a Server
- User Management & Roles
- Creating a Project
- Recon Presets
- Global Settings
Core Workflow
- Red Zone
- Recon Pipeline Workflow
- Running Reconnaissance
- Scan Timeline
- AI Agent Guide
- Fireteam — Parallel Specialists
- Exploit-Path Search (LATS)
- Agent Workspace
- Reverse Shells
Scanning & OSINT
- AI in the Recon Pipeline
- Adversarial AI Recon
- AI Gauntlet
- JS Reconnaissance
- GraphQL Security Testing
- Subdomain Takeover Detection
- VHost & SNI Enumeration
- TLS Certificate Grab
- Web Cache Poisoning
- Serialized Object Detection
- Origin Discovery
- GVM Vulnerability Scanning
- GitHub Secret Hunting
- Secret Multiscanner
- Supply-Chain Scanning
AI & Automation
- AI Model Providers
- MCP Tool Plugins
- MCP Server
- Knowledge Base & Web Search
- Agent Skills
- Chat Skills
- Tradecraft Lookup
- CVE Intel
- Playwright Browser Automation
- CypherFix — Automated Remediation
- Priority Board
- Rules of Engagement (RoE)
Plugins
HackLab
Analysis & Reporting
- Insights Dashboard
- TrafficMind
- Authenticated Session Recording
- proxy_brain — web hacking in code
- Pentest Reports
- Attack Surface Graph
- Surface Shaper
- EvoGraph — Attack Chain Evolution
- Data Export & Import
Contributing
Reference & Help