Academy · Labs

The Lab Universe

Hands-on exercises across every class of vulnerability. Read the brief, work it against your own target, and submit the flag. Points and your level are yours the moment you solve one — join the Academy to start tracking them.

7
labs
Difficulty
Category
Track
PractitionerRace condition

Redeeming a one-time code twice

Slip through the window between a check and the action it guards.

25 pts · 45 minStart →
PractitionerRace condition

Registering the same username twice

Slip through the window between a check and the action it guards.

25 pts · 45 minStart →
ExpertRace condition

Applying two coupons in the same instant

Slip through the window between a check and the action it guards.

50 pts · 90 minStart →
ExpertRace condition

Beating a rate limit with concurrency

Slip through the window between a check and the action it guards.

50 pts · 90 minStart →
ExpertRace condition

Withdrawing a balance in parallel

Slip through the window between a check and the action it guards.

50 pts · 90 minStart →
MasterRace condition

A TOCTOU gap in a file upload

Slip through the window between a check and the action it guards.

100 pts · 180 minStart →
MasterRace condition

Double-spend across two endpoints at once

Slip through the window between a check and the action it guards.

100 pts · 180 minStart →