Web Security Training Platform

Master cybersecurity vulnerabilities through hands-on labs designed to challenge and enhance your penetration testing skills.

217+
Labs Available
22
Vulnerability Types
3
Difficulty Levels
100%
Hands-On

Vulnerability Categories

XSS Labs
92 Labs
Cross-Site Scripting
XSS
SQL Injection Labs
8 Labs
SQL Injection
SQLI
LFI Labs
9 Lab
Local File Inclusion
LFI
RCE Labs
5 Lab
Remote Code Execution
RCE
SSTI Labs
5 Labs
Server-Side Template Injection
SSTI
HTTP Request Smuggling Labs
5 Labs
HTTP Request Smuggling
HTTP Request Smuggling
Command Injection Labs
5 Labs
Command Injection
Command Injection
IDOR Labs
10 Labs
Insecure Direct Object Reference
IDOR
Open Redirect Labs
5 Labs
Open Redirect
Open Redirect
Directory Traversal Labs
5 Labs
Directory Traversal
Directory Traversal
XXE Labs
5 Labs
XML External Entity
XXE
Subdomain Takeover Labs
5 Labs
Subdomain Takeovers
Subdomain
SSRF Labs
5 Labs
Server-Side Request Forgery
SSRF
RFI Labs
5 Labs
Remote File Inclusion
RFI
Response Manipulation Labs
17 Labs
Response Manipulation
Response Manipulation
Pollution Labs
5 Labs
Prototype Pollution
Pollution
OTP Bypass Labs
5 Labs
OTP Bypass
OTP Bypass
HTML Injection Labs
5 Labs
HTML Injection
HTMLi
File Upload Labs
5 Labs
File Upload
File Upload
CSTI Labs
5 Labs
Client-Side Template Injection
CSTI
CSRF Labs
5 Labs
Cross-Site Request Forgery
CSRF
CORS Labs
5 Labs
Cross-Origin Resource Sharing
CORS
Clickjacking Labs
5 Labs
Clickjacking
Clickjacking
Business Logic Labs
5 Labs
Business Logic Flaws
Business Logic