The Lab Universe
Hands-on exercises across every class of vulnerability. Read the brief, work it against your own target, and submit the flag. Points and your level are yours the moment you solve one — join the Academy to start tracking them.
8
labsDifficulty
Category
PractitionerPrivilege escalation
A hidden form value that grants admin
Climb from the access you were given to access you were not.
25 pts · 45 minStart →
PractitionerPrivilege escalation
The role field the client should not set
Climb from the access you were given to access you were not.
25 pts · 45 minStart →
ExpertPrivilege escalation
An admin route that never re-checks
Climb from the access you were given to access you were not.
50 pts · 90 minStart →
ExpertPrivilege escalation
An invite flow that leaks a higher role
Climb from the access you were given to access you were not.
50 pts · 90 minStart →
ExpertPrivilege escalation
Approving your own request as its reviewer
Climb from the access you were given to access you were not.
50 pts · 90 minStart →
MasterPrivilege escalation
A support-impersonation feature turned on yourself
Climb from the access you were given to access you were not.
100 pts · 180 minStart →
MasterPrivilege escalation
Horizontal to vertical in two steps
Climb from the access you were given to access you were not.
100 pts · 180 minStart →
MasterPrivilege escalation
Inheriting permissions through a group you joined
Climb from the access you were given to access you were not.
100 pts · 180 minStart →