The Lab Universe
Hands-on exercises across every class of vulnerability. Read the brief, work it against your own target, and submit the flag. Points and your level are yours the moment you solve one — join the Academy to start tracking them.
2
labsDifficulty
Category
PractitionerSQL / command injection
Error-based extraction from a chatty endpoint
Break out of a query or a shell command through unescaped input.
25 pts · 45 minStart →
PractitionerSQL / command injection
UNION-selecting the users table
Break out of a query or a shell command through unescaped input.
25 pts · 45 minStart →