MISSION 01
GHOST SIGNALS
CURL · GOOGLE DORKING · OSINT
Hunt for flags hidden in HTTP response headers and metadata using real recon techniques.
→ touchprotocol.org
MISSION 02
DARK SUBNET
GOBUSTER · DIRB · ENUMERATION
Discover hidden directories on a live subdomain using automated directory busting tools.
→ compliance.touchprotocol.org
MISSION 03
ZERO DAY
SQL INJECTION · SQLMAP · BYPASS
Exploit a real SQL injection vulnerability in a live PHP login form to bypass authentication entirely.
→ touchprotocol.org/login/
MISSION 04
BROKEN ARCHIVE
ZIP2JOHN · JOHN THE RIPPER · HASHCAT
Download a real password-protected archive and crack it using John the Ripper and rockyou.txt.
→ touchprotocol.org/archive/
MISSION 05
THE BROADCAST
CREDENTIAL REUSE · ADMIN TAKEOVER
Use credentials recovered from previous missions to take over the live admin panel and capture the final flag.
→ touchprotocol.org/admin/