Lab Link Probed Overview Probed was a chained web exploitation challenge involving two distinct vulnerabilities: SQL injection in the authentication endpoint, which allowed access to the ope...
Lab Link BuggedUp Overview BuggedUp was a WebVerse challenge built around a bug bounty program directory. The public UI displayed a list of bounty programs and company details, but the actual ...
Lab Link Plotted Overview Plotted was an AI-powered data analytics application that allowed users to ask questions about a warehouse using natural language. The backend translated each request i...
Lab Link Archived Overview Archived was a PHP-based document vault containing image uploads, a document verification feature, and a developer SDK page. The application initially appeared to exp...
Lab Link Tockerry Overview Tockerry was an old-style notice-board application that allowed users to create public posts. Each submitted notice was written to a generated .shtml page. The applic...
Lab Link Echoed Overview Echoed was a PHP-based lost-property register that allowed users to search for items using a reference number. The application displayed the submitted search term in tw...
Lab Link Splice Overview Splice was a WebVerse Pro challenge built around a Tapedeck-style audio studio. The application allowed users to upload an audio clip and generate an audiogram poster th...
Lab Link Bound Overview Bound is a directory-backed web challenge centered on an internal identity console called BadgeNet. The application authenticates users against an LDAP directory and expo...
Lab Link Zippy Overview Zippy was a web security challenge built around Shoebox, a small self-hosted PHP photo library. The application allowed users to add individual images or restore an entir...
Lab Link Indexed Overview Indexed is an internal document search application for a fictional company called Northwind. The application contains an AI assistant that answers questions using comp...