HackYard · Cyber Range
Attack real targets.
Learn by breaking it.
A deliberately-vulnerable cyber range, built to be hacked — realistic targets across 12 sectors, from finance and healthcare to critical infrastructure. Work through guided labs, capture real flags, and watch your scoreboard tick the moment an exploit lands.
- ✓Hands-on labs across SQL injection, IDOR, XSS, SSRF, JWT forgery, SSTI and more — each mapped to an OWASP category.
- ✓Flags grade themselves — pull off the exploit and it ticks automatically on the live scoreboard.
- ✓Beginner to advanced paths, with hints on tap when you're genuinely stuck.
12Sectors
20Live range labs
31Guided challenges
3Skill levels
Sign in
Accounts are issued by your administrator — there's no public sign-up. Need access? Ask your instructor or platform admin.
Inside the range
💉SQL injection (login bypass)Easy🔒
🔓IDOR — read any accountEasy🔒
📝Stored XSS in supportEasy🔒
🎫JWT alg:none forgeryMedium🔒