CMDCTRL_2024_logo R2-24
hacktrack-hack-through-the-heat

CMD+CTRL HackTrack

Hack Through The Heat


Event Details
Date: Wednesday, August 19th, 2026
Time: 6PM- 9PM PDT | 9PM - 12AM EDT
Location: Virtual
Range Info
Range Name: Shadow Bank
Difficulty Level: Core
Type: Banking Website

In partnership with:

Image description Image description Image description

We're Here to Help You!

No need to stress, we're here to make sure you enjoy every moment of the Cyber Range and get the best experience possible. Your instructor will guide you through these four important aspects of the range.

Find & Exploit Vulnerabilities

Score Points For Your Hard Work

Collaborate With Other Participants

Move Up The Leaderboard

Let's Get Set Up

HOW TO JOIN

Throughout the event, we’ll be using the community Slack channel as your go-to hub for resources, support, and interaction with the broader community. Join us there for short training videos, answers to your questions, and helpful hints in case you get stuck.

ACCESS YOUR ACCOUNT

Check your inbox for an email from noreply@cmdnctrl.net to complete your account setup.

If you can't find it, check your Spam/Junk email folder, or use the “Forgot Password” link at cmdnctrl.net to resend it.

CHAT DURING THE EVENT

Join us on Slack for assistance or to report issues.

We want you to score and are here to help. We don’t know you’re struggling unless you reach out.

NEW TO APPLICATION SECURITY?

If you are new to application security, we're here to help.

Check out our “cheat sheet” available on the CMD+CTRL platform by selecting the “GUIDES” section under “Hacking 101” in the main navigation menu.

About Shadow Bank

Our gamified Cyber Ranges are all about making learning fun and exciting! They’re designed to give you a peek into how connected software works and where it might fail when it comes to security vulnerabilities and exploits.

Shadow Bank is a classic financial services web application that challenges participants with vulnerabilities such as cross-site scripting (XSS), password cracking, authorization bypass, business logic abuse, SQL Injection, and more.

Shadow Bank 2024