The Lab Universe
Hands-on exercises across every class of vulnerability. Read the brief, work it against your own target, and submit the flag. Points and your level are yours the moment you solve one — join the Academy to start tracking them.
8
labsDifficulty
Category
ApprenticeInformation disclosure
A backup file left in the web root
Find the secret the application leaks without meaning to.
10 pts · 20 minStart →
ApprenticeAuthentication bypass
A login that leaks which half was wrong
Get past the login without the credential it is supposed to demand.
10 pts · 20 minStart →
ApprenticeCSRF
Changing an email with a single GET
Make a logged-in victim's browser send a state-changing request.
10 pts · 20 minStart →
ApprenticeInformation disclosure
Comments in the source with a key in them
Find the secret the application leaks without meaning to.
10 pts · 20 minStart →
ApprenticeCross-site scripting (XSS)
Reflected in the search box
Get your script to run in another visitor's browser on this origin.
10 pts · 20 minStart →
ApprenticeAuthentication bypass
The default credential nobody changed
Get past the login without the credential it is supposed to demand.
10 pts · 20 minStart →
ApprenticeCross-site scripting (XSS)
The error page that echoes your input
Get your script to run in another visitor's browser on this origin.
10 pts · 20 minStart →
ApprenticeInformation disclosure
The stack trace that names the database
Find the secret the application leaks without meaning to.
10 pts · 20 minStart →