Pwn · Wargames

Pwn challenges.

71 pwn challenges on AirOverflow Arena. Each runs in its own isolated instance, started from the browser, and is scored on a flag you capture yourself.

Challenges: 71
Top value: 700
Solves so far: 460

Pwn challenges, with difficulty, points and solve count
Challenge	Difficulty	Points	Solves
DB	insane	700	2
House of Nadeem	insane	700	2
Valorant	insane	700	2
stl	insane	700	6
back2rop	hard	600	7
FlashGUARD	hard	500	2
Guest Portal	insane	500	0
MyDiary	hard	500	2
Ticket Machine	hard	500	4
Record Store	insane	450	0
Calc-aaS	medium	400	6
FHoD	hard	400	1
Ledger Service	hard	400	0
todos	medium	400	1
Code Submission	hard	350	0
Exception Dispatch	hard	350	0
Plugin Host	hard	350	0
Session Manager	hard	350	0
Two Chances	hard	350	1
Code Drop	hard	300	0
Dispatch Board	hard	300	0
Document Store	hard	300	0
Index Cards	hard	300	0
Label Printer	hard	300	0
Module Inspector	hard	300	0
Note Keeper	hard	300	0
Record Parser	hard	300	0
The Dispatcher	medium	300	2
Ticket Desk	hard	300	0
Comment Box	medium	250	0
Connection Buffer Service	medium	250	1
Dispatcher	medium	250	0
Guestbook	medium	250	0
Note Manager	medium	250	0
Notes Service	medium	250	0
Notes, Kept Too Long	medium	250	2
OOB	medium	250	1
Stack Pivoting	medium	250	2
The Turnstile	medium	250	2
Visitor Book	medium	250	0
ret2libc	medium	250	3
DEP, ASLR and GS	hard	200	1
Document Service	medium	200	0
Door Controller	easy	200	4
Feedback Terminal	easy	200	3
Guest Register	medium	200	0
Help Desk	medium	200	0
Master Canary Overwrite	medium	200	0
Order Intake	medium	200	0
Vec	easy	200	8
deadfish	easy	200	8
GS, the TEB and the PEB	hard	150	2
Introductions First	beginner	150	6
Log Viewer	easy	150	1
Memory Inspector	easy	150	2
Records Terminal	easy	150	3
baby-pwn	easy	150	11
ret2gets	medium	150	1
ret2system	medium	150	1
Employee Directory	beginner	100	6
Sign-In Sheet	easy	100	1
Stack Alignment	easy	100	0
The Shift Log	easy	100	5
Windows Stack Overflow 101	medium	100	1
cout	beginner	100	19
note	easy	100	5
ret2shellcode	easy	100	7
ret2win	easy	100	8
babys-first-step	easy	50	158
pwn-101	easy	50	149
Registration Desk	walkthrough	0	1

DB
insane
700 2
House of Nadeem
insane
700 2
Valorant
insane
700 2
stl
insane
700 6
back2rop
hard
600 7
FlashGUARD
hard
500 2
Guest Portal
insane
500 0
MyDiary
hard
500 2
Ticket Machine
hard
500 4
Record Store
insane
450 0
Calc-aaS
medium
400 6
FHoD
hard
400 1
Ledger Service
hard
400 0
todos
medium
400 1
Code Submission
hard
350 0
Exception Dispatch
hard
350 0
Plugin Host
hard
350 0
Session Manager
hard
350 0
Two Chances
hard
350 1
Code Drop
hard
300 0
Dispatch Board
hard
300 0
Document Store
hard
300 0
Index Cards
hard
300 0
Label Printer
hard
300 0
Module Inspector
hard
300 0
Note Keeper
hard
300 0
Record Parser
hard
300 0
The Dispatcher
medium
300 2
Ticket Desk
hard
300 0
Comment Box
medium
250 0
Connection Buffer Service
medium
250 1
Dispatcher
medium
250 0
Guestbook
medium
250 0
Note Manager
medium
250 0
Notes Service
medium
250 0
Notes, Kept Too Long
medium
250 2
OOB
medium
250 1
Stack Pivoting
medium
250 2
The Turnstile
medium
250 2
Visitor Book
medium
250 0
ret2libc
medium
250 3
DEP, ASLR and GS
hard
200 1
Document Service
medium
200 0
Door Controller
easy
200 4
Feedback Terminal
easy
200 3
Guest Register
medium
200 0
Help Desk
medium
200 0
Master Canary Overwrite
medium
200 0
Order Intake
medium
200 0
Vec
easy
200 8
deadfish
easy
200 8
GS, the TEB and the PEB
hard
150 2
Introductions First
beginner
150 6
Log Viewer
easy
150 1
Memory Inspector
easy
150 2
Records Terminal
easy
150 3
baby-pwn
easy
150 11
ret2gets
medium
150 1
ret2system
medium
150 1
Employee Directory
beginner
100 6
Sign-In Sheet
easy
100 1
Stack Alignment
easy
100 0
The Shift Log
easy
100 5
Windows Stack Overflow 101
medium
100 1
cout
beginner
100 19
note
easy
100 5
ret2shellcode
easy
100 7
ret2win
easy
100 8
babys-first-step
easy
50 158
pwn-101
easy
50 149
Registration Desk
walkthrough
0 1

Get started

Play the pwn challenges

Create a free account, start an instance and submit your first flag.

Create a free account Sign in →

DB

House of Nadeem

Valorant

stl

back2rop

FlashGUARD

Guest Portal

MyDiary

Ticket Machine

Record Store

Calc-aaS

FHoD

Ledger Service

todos

Code Submission

Exception Dispatch

Plugin Host

Session Manager

Two Chances

Code Drop

Dispatch Board

Document Store

Index Cards

Label Printer

Module Inspector

Note Keeper

Record Parser

The Dispatcher

Ticket Desk

Comment Box

Connection Buffer Service

Dispatcher

Guestbook

Note Manager

Notes Service

Notes, Kept Too Long

OOB

Stack Pivoting

The Turnstile

Visitor Book

ret2libc

DEP, ASLR and GS

Document Service

Door Controller

Feedback Terminal

Guest Register

Help Desk

Master Canary Overwrite

Order Intake

Vec

deadfish

GS, the TEB and the PEB

Introductions First

Log Viewer

Memory Inspector

Records Terminal

baby-pwn

ret2gets

ret2system

Employee Directory

Sign-In Sheet

Stack Alignment

The Shift Log

Windows Stack Overflow 101

cout

note

ret2shellcode

ret2win

babys-first-step

pwn-101

Registration Desk

Play the pwn challenges