Identity
Authentication Logic Flaws
Find fail-open and normalization mistakes without attacking real accounts.
Join to unlock →Curriculum map
From symptoms to systems thinking.
Every module uses a constrained replica. Your actions cannot reach host files, a real shell, private services, or arbitrary networks.
Data
SQL Injection
Manipulate a query over disposable synthetic account data.
Join to unlock →Browser
Reflected & Stored XSS
Observe context-sensitive output encoding in an isolated browser origin.
Join to unlock →Browser
Cross-Site Request Forgery
Trigger a state change in a fake transfer app, then enforce intent.
Join to unlock →Authorization
IDOR / BOLA
Demonstrate that knowing an object identifier does not grant access.
Join to unlock →Server
SSRF & Blind OOB
Explore URL validation while a non-bypassable transport guard prevents arbitrary egress.
Join to unlock →Files
Upload & Path Traversal
Escape a virtual upload directory without ever touching the host filesystem.
Join to unlock →Server
Command Construction Injection
Alter a command assembled for a deterministic virtual shell.
Join to unlock →