The Lab Universe
Hands-on exercises across every class of vulnerability. Read the brief, work it against your own target, and submit the flag. Points and your level are yours the moment you solve one — join the Academy to start tracking them.
7
labsDifficulty
Category
ExpertRemote code execution
A file type check you can talk past
Turn a foothold into commands running on the server itself.
50 pts · 90 minStart →
ExpertRemote code execution
An upload that lands in an executable path
Turn a foothold into commands running on the server itself.
50 pts · 90 minStart →
MasterRemote code execution
A dependency confusion package that runs on install
Turn a foothold into commands running on the server itself.
100 pts · 180 minStart →
MasterRemote code execution
Argument injection into a called binary
Turn a foothold into commands running on the server itself.
100 pts · 180 minStart →
MasterRemote code execution
From deserialization gadget to shell
Turn a foothold into commands running on the server itself.
100 pts · 180 minStart →
MasterRemote code execution
Template injection to command execution
Turn a foothold into commands running on the server itself.
100 pts · 180 minStart →
MasterRemote code execution
XXE escalated to a file read and beyond
Turn a foothold into commands running on the server itself.
100 pts · 180 minStart →