Hands-on TLS / PKI exploitation
Don't read about TLS attacks.
Break TLS, live.
125 self-contained Docker challenges with real TLS client/server traffic. Exploit the protocol, key, config or crypto — ready to run, solutions included, nothing to build yourself.
[*] Starting challenge... [*] Capturing the TLS handshake... [*] Recovering the RSA private key... [+] Private key reconstructed > secret captured: 3f9a2e6c1b... > validator: MATCH
Assess
Work against live TLS client/server traffic rather than isolated cryptographic exercises.
Exploit
Break configuration, protocol, key, RNG, signature and oracle weaknesses in a repeatable lab.
Understand
Every challenge comes with a working exploit and the explanation behind the attack.