SURAPURA Offensive Security
  • About Us ▾
    Team Vuln-Explorer
  • Services
  • XSS Dojo ▾
    XSS POP Challenge DOM SINK Exploitation
  • Labs
  • Blogs
  • Book a Briefing

Labs

Hands-on training environments for practicing real-world offensive security techniques. From bash scripting fundamentals to advanced web exploitation.

🏯
Self-Hosted

XSS

6 advanced XSS scenarios inspired by real Intigriti challenges and real-world bugs.

DOM XSS SSTI PARSER-DISCREPANCY
Download
🏹
Live

Tarkash

API security lab covering XSS, IDOR and JWT manipulation.

API Security XSS IDOR JWT
Go to Lab
⚔️
Live

SelfKiri

A high-difficulty web exploitation lab to steal the admin’s API key in a single click.

XSS Browser Chained Exploits
Go to Lab
>_
Self-Hosted

Bash Lab

A Docker-based lab for building offensive automation skills using pure Bash and curl.

Docker Bash curl Automation
Download
© 2026 SURAPURA Offensive Security. All rights reserved.
support@surapura.in Discord