DIMENSION ◈ · sec/grid

THE GRID

h3ll0 friend. i've been watching this site. want to break something?

Aqeel is eJPTv2 certified and OSCP-track. This grid is a live demo of that — real techniques, real educational payoff, zero actual risk.

🛡️ practice environment — every target here is a toy running in your own browser. this is not an invitation to test the real site.
◧ webONLINE

SQL Injection 101

HEMLEM PORTAL's login form was written in a hurry. The dev trusted the input string. Tha…

easy
◧ webONLINE

XSS Reflected

SearchGrid reflects the query back in the results banner. Nobody escaped the output befo…

easy
◧ webONLINE

Insecure Direct Object Reference

HEMLEM HR Portal uses sequential integer IDs in the API path. The backend authenticates …

medium
◧ webONLINE

Command Injection

HEMLEM Network Tools has a ping utility that passes the host directly into a shell comma…

medium
◆ cryptoONLINE

JWT Weak Secret

HEMLEM Auth issues HS256 JWT tokens. The engineer who picked the signing secret had a fa…

hard
◉ reconONLINE

Recon: robots.txt

HEMLEM's public portal has a robots.txt. Whoever wrote it used the Disallow list as a fi…

easy