Find the loophole.
Close it.
Every lab here is a pretend target inside a locked sandbox. You get to think like an attacker for a minute, on purpose, so you learn the one thing that actually stops them. Nothing you do can reach a real website.
🔒 The one rule of this range
We only show tricks that are already well known and already have a fix. You will never learn how to harm a real person or a real site here. You will learn how to protect one.