The Lab Universe
Hands-on exercises across every class of vulnerability. Read the brief, work it against your own target, and submit the flag. Points and your level are yours the moment you solve one — join the Academy to start tracking them.
3
labsDifficulty
Category
MasterBroken access control / IDOR
Chaining two objects into a full account read
Reach an object that was never yours by changing the id that names it.
100 pts · 180 minStart →
MasterServer-side request forgery (SSRF)
Gopher-smuggling a request to an internal service
Make the server fetch a URL of your choosing, from inside its network.
100 pts · 180 minStart →
MasterServer-side request forgery (SSRF)
Redirect-hopping into a private range
Make the server fetch a URL of your choosing, from inside its network.
100 pts · 180 minStart →