JWT Secret Cracking & Privilege Escalation via Forged Tokens | Tally Overview Tally is a lightweight bookkeeping micro-SaaS built for freelancers and small studios. Authentication relied on J...
Command Injection via Filename Parameter Leading to Remote Code Execution | Quotin Overview Quotin is a small handcrafted letterpress platform that allows visitors to upload monogram designs and ...
Overview This lab demonstrates an XML External Entity (XXE) vulnerability in a client portal feature that processes OFX bank statement uploads. The application parses XML input without properly re...
Overview Outbox is a minimal email-newsletter SaaS platform that provides users with a lightweight compose-and-preview workflow for newsletters. The application implemented custom placeholder ren...
Tanuki Tanuki is a flashcard application that allows users to import custom decks through an XML-based API endpoint. During testing, the XML parser appeared resistant to traditional XXE payloads, ...
MapleTon MapleTon is a vulnerable real-estate listing application where property pages are dynamically loaded using a user-controlled parameter. The application fails to properly validate file pat...
NoSQL Injection Authentication Bypass – Admin Panel Access | SnickerDoodle Overview Snickerdoodle Bake-off is a baking competition platform that evolved from a small Discord community into a full...
Cheesy Does It Cheesy Does It is a pizza ordering application exposing an API for cart management and order tracking. During testing, the order retrieval endpoint was found to use predictable sequ...
Overview This lab is based on a fictional e-commerce platform, Hartwood & Co., which sells pet-related products. The application was rushed into production, and a test order was accidentally l...
Overview Cafe Club is a coffee-related e-commerce application vulnerable to a race condition in its cart and checkout workflow. By abusing concurrent cart update requests, it was possible to purch...