Events & Training

Engage your team with hands-on security events.

From corporate CTF competitions to custom cybersecurity workshops, we create engaging events that build real-world security skills and strengthen team collaboration.

Content & Learning Platforms

Master cybersecurity through practice.

Our comprehensive learning platform includes hands-on labs, structured courses, and realistic scenarios covering offensive, defensive, and application security.

Cybersecurity Services

Professional penetration testing & security services

Parrot CTFs Cyber Consulting Portal

Tailored penetration testing and security services starting at $1,200/month. We help businesses achieve better security posture and comply with NIS2, GDPR, HIPAA, PCI-DSS, and SOC2.

Featured Services:

  • ASM Lorikeet ($1,200/mo)
  • Web App Pentesting
  • Compliance Testing
  • Red Team Operations
  • Vulnerability Management
  • Patch Management

Awareness & Engagement

Build a security-aware culture.

Gamified training, continuous education programs, and interactive CTF platforms that make security awareness engaging and effective for your entire organization.

Hacking Glossary

A comprehensive glossary of hacking terms and concepts.

Explore hacking terms

Hacking Cheat Sheets

A collection of cheat sheets for various hacking techniques and tools.

Hang out

Help Center

FAQs, and troubleshooting tips.

Visit Help Center

Introduction to Parrot CTFs

A guide to getting started with Parrot CTFs.

Read Guide

From the Blog
report

New release: The latest on CVE-2025-29927 – NextJS Vulnerability

21 Mar 2025, CVE-2025-29927 was made public by Next,js maintainers and this vulnerability can lead to Authentication bypass. This vulnerability is discovered by Rachid and Yasser Allam and possible to bypass authentication if they occur in middleware

View vulnerability report
Why Parrot CTFs Cyber Consulting

Join our mission to create a safer cyber world by making cybersecurity training & consulting fun and accessible to everyone.

Get started with Parrot CTFs Cyber Consulting
Featured News

Level Up Your Active Directory Hacking: Parrot CTFs Now Hosts GOAD by Orange Cyberdefense

We’re proud to announce that Parrot CTFs now officially hosts GOADV3 developed by Orange Cyber Defense.

Read more news
Store
Free Trial

Start a free trial

Experience our enterprise solutions with a 14-day free trial.

Get started
Book Demo

Book a demo

Let us show you how Parrot CTFs can help your organization.

Book now
Resources

Hacking Glossary

A comprehensive glossary of hacking terms and concepts.

Explore hacking terms

Hacking Cheat Sheets

A collection of cheat sheets for various hacking techniques and tools.

Hang out

Help Center

FAQs, and troubleshooting tips.

Visit Help Center

Introduction to Parrot CTFs

A guide to getting started with Parrot CTFs.

Read Guide

From the Blog
report

New release: The latest on CVE-2025-29927 – NextJS Vulnerability

21 Mar 2025, CVE-2025-29927 was made public by Next,js maintainers and this vulnerability can lead to Authentication bypass. This vulnerability is discovered by Rachid and Yasser Allam and possible to bypass authentication if they occur in middleware

View vulnerability report
Company
Why Parrot CTFs Cyber Consulting?

Join our mission to create a safer cyber world by making cybersecurity training & consulting fun and accessible to everyone.

Get started with Parrot CTFs Cyber Consulting
Featured News

Level Up Your Active Directory Hacking: Parrot CTFs Now Hosts GOAD by Orange Cyberdefense

We’re proud to announce that Parrot CTFs now officially hosts GOADV3 developed by Orange Cyber Defense.

Read more news
Store
Lab
Active Machine

RootQL

Linux
Easy

5.0

MACHINE RATING

Weak Authentication

CATEGORY

55

ENTRY STARTS

October 13, 2023

RELEASED

Machine Description


Welcome to GraQLand, the magical realm of GraphQL APIs. A mischievous fairy has hidden the flag amidst its API tree. Traverse the mystical endpoints, decipher riddles, and unearth the hidden flag. But beware of the GraphQL challenges. Do you have the charm to outwit the fairy and capture the flag?

Ready to start your hacking journey?