MapleTon MapleTon is a vulnerable real-estate listing application where property pages are dynamically loaded using a user-controlled parameter. The application fails to properly validate file pat...
NoSQL Injection Authentication Bypass – Admin Panel Access | SnickerDoodle Overview Snickerdoodle Bake-off is a baking competition platform that evolved from a small Discord community into a full...
Cheesy Does It Cheesy Does It is a pizza ordering application exposing an API for cart management and order tracking. During testing, the order retrieval endpoint was found to use predictable sequ...
Overview This lab is based on a fictional e-commerce platform, Hartwood & Co., which sells pet-related products. The application was rushed into production, and a test order was accidentally l...
Overview Cafe Club is a coffee-related e-commerce application vulnerable to a race condition in its cart and checkout workflow. By abusing concurrent cart update requests, it was possible to purch...
Overview Evergreen Property Management provided a resident tenant portal for users to manage their accounts and view property-related information. During testing, the application issued a JWT-base...
GraphQL Introspection and Sensitive Data Exposure | Ottergram Overview While testing Ottergram, the application was found using a GraphQL backend for handling user-related functionality. GraphQL...
UUID-Based IDOR Through Member API | Apex Fitness Overview Apex Fitness migrated its member portal from sequential numeric IDs to UUID-based identifiers believing this would eliminate IDOR vulner...
Predictable Time-Based Auth Token Leading to Authentication Bypass | Sokudo Overview Sokudo is a typing speed platform that used a custom authentication mechanism for accessing authenticated func...
Overview SunnySide was a daycare enrollment platform that allowed parents to submit inquiries for childcare programs through an online registration form. During testing, the /enroll endpoint was ...