red team sandbox with real detection
2 April 2026 at 16:30
Built a free red team arena for testing real attack paths against a live defense system for ShieldNet DLX7.
This is NOT a CTF or a static lab. It actually responds to what you do.
Current scenarios:
- prompt injection bypass
- DOM tamper (including honeytrap detection)
- JWT forging (alg confusion, role escalation)
- API exfil (debug routes, traversal)
- indirect injection (markdown, SVG, base64 payloads)
Everything runs in a sandbox. No production targets. Novel attacks generate detection rules that get reviewed and pushed into the system
If you want to test how your payloads actually hold up against modern defenses, this is useful.
[link] [comments]