瀏覽器模擬器
內建 iframe sandbox，直接與挑戰應用程式互動
WXL網站滲透實驗室
完全基於前端 WASM 的 Web 資安挑戰平台 — 無需後端、即開即練
Skip to content
Terminal (wxlsh)
內建終端機，支援 curl、base64、hex 等滲透測試常用工具
Code Editor (Pyodide)
Python 攻擊腳本編輯器，支援 requests 模組與自動化攻擊
HTTP Repeater
攔截並重放 HTTP 請求，自由修改參數測試漏洞
Network Traffic Log
完整記錄所有工具面板的 HTTP 請求與回應，含狀態碼與計時
滲透測試筆記
Markdown 筆記系統，自動記錄操作歷程，可匯出完整攻擊記錄
About WXL
WXL (Web Exploitation Laboratory) is a fully front-end Web security challenge platform powered by WebAssembly. Every challenge backend — Flask, FastAPI, PHP — runs entirely inside the browser, so realistic pentest practice needs zero server. Built-in HTTP Repeater, Python Code Editor, and a terminal emulator together provide a complete attack toolchain.
Platform Statistics
1
Total challenges
1
Easy
0
Medium
0
Hard
0
Mystery
Latest Challenges
Three Steps to Get Started
1
Pick a challenge
Open the challenges page and pick one by difficulty or category.
2
Use the tools
Use the built-in Browser, Terminal, Code Editor, and Repeater to analyse and exploit the vulnerability.
3
Submit the flag
Once you find the flag, paste it into the submit box on the challenge page to confirm your answer.