No-hint Master
Complete every level in an area without using a single hint.
Your progress, badges, and streak.
Day one. The arcade is yours to explore.
Complete every level in an area without using a single hint.
Solve every level in an area on the first try.
Solve at least one level in every area.
Complete 100% of a homepage section (Start here, Dive deeper, or Security).
Solve every Encoding level first try with zero hints.
Solve 10 levels.
Solve 25 levels.
Solve 50 levels.
Solve every level in the arcade.
Solve any hard-mode challenge.
Solve every level that ships a hard-mode challenge. The bar rises as more hard-mode levels land.
Not encryption.
Puzzles before math.
AES and friends.
The key exchange miracle.
Integrity, not secrecy.
TLS, PGP, Signal, real systems.
Real-world security for engineers.
How language models actually work.
Everyday engineering basics.
How packets become pages.
Build, test, ship.
Keep the service alive.
HTTP, REST, auth, pagination — the interfaces between services.
Version control, for real this time.
SQL, indexes, transactions.
HTML, CSS, React, rendering, performance.
The system around the shell.
Mac power-user skills.
Helpdesk to fleet: the skills the company actually depends on.
Numbers, collections, nulls, strings — what the bits actually mean.
Docker, Kubernetes, and the space between.
XSS, CSRF, SSRF, CSP — the web attacker's playbook.
Mental models for the big three.
How code becomes execution.
Sorting, searching, traversing — watch them unfold.
Curious minds look under the hood.
Attributes can hide treasures.
The hex lesson is more than instructional.
Base64 speaks volumes.
Somewhere, a transmission looks suspiciously like the Caesar lesson itself.
Two suspicious hex strings around the site are the same length — that's rarely an accident.
The Network tab carries more than JSON — headers speak too.
Some combos never die.
Go where the map ends.
Hidden `DECIMA{...}` strings live throughout the arcade. Find them, paste them below, collect badges.