Lab Link Lab: Hollow Run Bedding Overview Hollow Run Bedding allows verified buyers to leave reviews and upload photos of their mattresses. The review functionality includes a file upload fea...

Lab Link Lab: Salt Brook Pilates Overview Salt Brook Pilates is a two-location reformer Pilates studio with an online class booking platform. Members can manage their profile and book sessions...

Overview This challenge is based on a partially migrated product platform for a fictional company, Suited & Co. The application exposes a product API where legacy image handling logic was not ...

Lab Link Lab: Remittance Overview InvoiceVault is a SaaS platform that allows freelancers to manage invoices and export account data for portability purposes. The application exposes an accoun...

Lab Link Lab: Schematic Overview Schematic Inc exposes a polished internal product dashboard. The frontend only displays limited information, but the backend GraphQL API exposes more data than...

Lab Link Lab: Candy Overview This lab simulates a themed confectionery website with a hidden staff portal. The application contains multiple security issues, starting from SQL injection in the l...

Lab Link Lab: Versed Overview This lab is an internal read-only catalogue mirror used for QA. It runs as a single-page interface with a search feature added late in development. That search inpu...

Lab Link Lab: Slash & Sons Overview The Slash & Sons challenge demonstrates a classic OS Command Injection vulnerability inside a legacy CGI application. The application contained an ol...

Lab Link Lab: Netcheck Overview Netcheck is an uptime-monitoring SaaS platform that provides customers with a diagnostics panel for troubleshooting network connectivity issues. The diagnostic...

Lab Link Lab: Statuscraft Overview The Statuscraft challenge demonstrates a Server-Side Request Forgery (SSRF) vulnerability inside a monitor preview feature. The application allowed users to a...