hack the base is a beginner friendly ctf challenge aimed at teaching developers and security enthusiasts about securing your web application.

• we have nine flags hidden in a web app that you need to find and submit to complete the challenge.
• the challenge is open to everyone.
• flags have the format "flag::[difficulty]::[sha1]".
• the challenge begins December 8th at 1am PT.
• submissions close December 14th at 1am PT.
• prizes will be awared to the first to find the expert flag, high scorers, and at random!
• your email address will not be kept after the challenge is over.
• DoS techniques are strictly not in scope.
• the Supabase project associated with the challenge is the only project in scope for the challenge.

getting started

To get started with the challenge, follow these steps:

1. sign up with the 'participate' button.
2. brush up on our testing guidelines and bug bounty program while you wait.
3. the link to the challenge is [***here***].
4. start hunting for flags.
5. enter you flags in /submit as soon as you find them. you must be logged in.
6. follow your progress on the leaderboard.
7. stay tuned to our social media channels for hints and annoucements.