The Lab Universe
Hands-on exercises across every class of vulnerability. Read the brief, work it against your own target, and submit the flag. Points and your level are yours the moment you solve one — join the Academy to start tracking them.
A password-reset token you can predict
Break the guarantee a weak or misused primitive was meant to give.
An ECB-mode image that leaks its shape
Break the guarantee a weak or misused primitive was meant to give.
A length-extension against a naive MAC
Break the guarantee a weak or misused primitive was meant to give.
Swapping a JWT to the 'none' algorithm
Break the guarantee a weak or misused primitive was meant to give.
The JWT signed with a guessable secret
Break the guarantee a weak or misused primitive was meant to give.
A padding oracle that reads the ciphertext
Break the guarantee a weak or misused primitive was meant to give.
Forging a session from a leaked signing key
Break the guarantee a weak or misused primitive was meant to give.
Nonce reuse that unwinds the keystream
Break the guarantee a weak or misused primitive was meant to give.