Overview Saint Croix University exposed a vulnerable OpenLDAP-backed search functionality through its public academic program directory. User-controlled input from the q parameter was directly con...
GraphQL BOLA via Introspection & Insecure Resolver Access | Slate Quarry Overview Slate Quarry is a WebVerse Labs challenge focused on GraphQL security weaknesses, specifically: GraphQL s...
Command Injection & Broken Function Level Authorization | NewsForge Overview NewsForge is a WebVerse Labs challenge focused on two major vulnerabilities: Command Injection through the sea...
Local File Inclusion via PHP Stream Wrappers | DocketHive Overview DocketHive is a beginner-friendly PHP security lab from WebVerse Labs focused on Local File Inclusion (LFI) through PHP stream w...
Mass Assignment Leading to Admin Account Creation | Trellis Overview Trellis is a lightweight collaboration platform designed for small remote teams. During account registration, the frontend sig...
JWT Secret Cracking & Privilege Escalation via Forged Tokens | Tally Overview Tally is a lightweight bookkeeping micro-SaaS built for freelancers and small studios. Authentication relied on J...
Command Injection via Filename Parameter Leading to Remote Code Execution | Quotin Overview Quotin is a small handcrafted letterpress platform that allows visitors to upload monogram designs and ...
Overview This lab demonstrates an XML External Entity (XXE) vulnerability in a client portal feature that processes OFX bank statement uploads. The application parses XML input without properly re...
Overview Outbox is a minimal email-newsletter SaaS platform that provides users with a lightweight compose-and-preview workflow for newsletters. The application implemented custom placeholder ren...
Tanuki Tanuki is a flashcard application that allows users to import custom decks through an XML-based API endpoint. During testing, the XML parser appeared resistant to traditional XXE payloads, ...