The Lab Universe
Hands-on exercises across every class of vulnerability. Read the brief, work it against your own target, and submit the flag. Points and your level are yours the moment you solve one — join the Academy to start tracking them.
3
labsDifficulty
Category
ExpertCryptographic weakness
A length-extension against a naive MAC
Break the guarantee a weak or misused primitive was meant to give.
50 pts · 90 minStart →
ExpertCryptographic weakness
Swapping a JWT to the 'none' algorithm
Break the guarantee a weak or misused primitive was meant to give.
50 pts · 90 minStart →
ExpertCryptographic weakness
The JWT signed with a guessable secret
Break the guarantee a weak or misused primitive was meant to give.
50 pts · 90 minStart →