Lab Link Lab: Brackish Brewing Co. Overview The Brackish Brewing Co. challenge demonstrates an access control flaw caused by trusting client-controlled headers. The staff portal was designed to...
Lab Link Lab: CutCorner Overview The CutCorner challenge demonstrates a Server-Side Request Forgery (SSRF) vulnerability combined with an insufficient blacklist implementation. The application ...
Lab Link Lab: Coltsfoot Community Center Overview The Coltsfoot Community Center challenge demonstrates a Broken Access Control issue where sensitive functionality relied on obscurity instead of...
Lab Link Lab: Viber Overview The Vibed challenge demonstrates a classic SQL Injection vulnerability within an internal administrative log filtering functionality. The application contained an a...
Lab Link Lab: Cookie Cutter Overview The Cookie Cutter challenge demonstrates an information disclosure vulnerability caused by storing sensitive application data directly inside client-side coo...
Lab Link Lab: snooker Overview The Snooker challenge demonstrates a business logic vulnerability where security-sensitive pricing information was trusted from client-controlled data. The applic...
Lab Link Lab: Heartwood Outfitters Overview Password reset functionality is commonly implemented to improve usability, but weak reset mechanisms frequently become direct paths to account comprom...
Lab Link Lab: Header Hunt Overview Applications often expose more information than intended through HTTP response headers. During development, engineers may add custom headers for troubleshootin...
Lab Link Lab: Lazy Human Resources Overview The Lazy Human Resources challenge demonstrates a classic workflow authorization flaw where the application relies on client-side restrictions rather ...
Lab Link Lab: Crate & Sleeve Overview The Crate & Sleeve challenge appears to demonstrate a Stored Cross-Site Scripting (Stored XSS) vulnerability within community comment functionality....