The Lab Universe
Hands-on exercises across every class of vulnerability. Read the brief, work it against your own target, and submit the flag. Points and your level are yours the moment you solve one — join the Academy to start tracking them.
3
labsDifficulty
Category
ExpertAuthentication bypass
A password reset that trusts the wrong field
Get past the login without the credential it is supposed to demand.
50 pts · 90 minStart →
ExpertAuthentication bypass
An OAuth state parameter nobody validates
Get past the login without the credential it is supposed to demand.
50 pts · 90 minStart →
ExpertAuthentication bypass
Reusing a magic link that never expired
Get past the login without the credential it is supposed to demand.
50 pts · 90 minStart →