Analyze inbound request
Inspect IP, Method, Path, Headers, Cookie and Body.
INTERACTIVE BACKEND ROUTING SIMULATION
ROUTE THE REQUEST.DEFEND THE BACKEND.
CoreSec is a fast-paced backend routing game. Inspect inbound requests, choose the correct HTTP response, and execute the right server action before the route times out.
HTTP / SQL / JSONXSS / IDOR / SSRFGLOBAL RANKING
POST /api/login
403 BLOCKED
REQUEST LIFECYCLE
One request. One correct route.
Read the evidence, decide the response, execute the backend action, then route the result to the frontend.
Choose the status
Return the correct HTTP Status Code for the situation.
Execute the action
Select the correct SQL, file, Session or server operation.
Route the response
Submit the response and move immediately to the next request.
CORESEC / DOCS
Requirements.txt
Not prerequisites—these are the signals you will learn to read inside CoreSec.
Read HTTP Headers and identify suspicious values.
Recognize valid, blocked and abnormal IP activity.
Parse JSON structures, values and malformed bodies.
Choose safe and correct SQL instructions.
Understand API Body, Method and Path behavior.
Know what each HTTP Status Code communicates.
Detect SQLi, XSS, IDOR, SSRF, privilege abuse and more.