Lab Link Lab: Candy Overview This lab simulates a themed confectionery website with a hidden staff portal. The application contains multiple security issues, starting from SQL injection in the l...
Lab Link Lab: Versed Overview This lab is an internal read-only catalogue mirror used for QA. It runs as a single-page interface with a search feature added late in development. That search inpu...
Lab Link Lab: Slash & Sons Overview The Slash & Sons challenge demonstrates a classic OS Command Injection vulnerability inside a legacy CGI application. The application contained an ol...
Lab Link Lab: Netcheck Overview Netcheck is an uptime-monitoring SaaS platform that provides customers with a diagnostics panel for troubleshooting network connectivity issues. The diagnostic...
Lab Link Lab: Statuscraft Overview The Statuscraft challenge demonstrates a Server-Side Request Forgery (SSRF) vulnerability inside a monitor preview feature. The application allowed users to a...
Lab Link Lab: Brackish Brewing Co. Overview The Brackish Brewing Co. challenge demonstrates an access control flaw caused by trusting client-controlled headers. The staff portal was designed to...
Lab Link Lab: CutCorner Overview The CutCorner challenge demonstrates a Server-Side Request Forgery (SSRF) vulnerability combined with an insufficient blacklist implementation. The application ...
Lab Link Lab: Coltsfoot Community Center Overview The Coltsfoot Community Center challenge demonstrates a Broken Access Control issue where sensitive functionality relied on obscurity instead of...
Lab Link Lab: Viber Overview The Vibed challenge demonstrates a classic SQL Injection vulnerability within an internal administrative log filtering functionality. The application contained an a...
Lab Link Lab: Cookie Cutter Overview The Cookie Cutter challenge demonstrates an information disclosure vulnerability caused by storing sensitive application data directly inside client-side coo...