TRAINING LAB

Loading your mission…

Desktop or laptop recommended. Some challenges use browser Developer Tools.

YOUR MISSION

THE GOAL

New here? Start with this

A flag is a short piece of text inside FLAG{...}. Find it in the fake shop or a training request, then paste it below.

To see background requests, press F12 (or Ctrl+Shift+I; on Mac, ⌥⌘I). Open Network, choose Fetch/XHR, then reload the shop or click its button. Open a request and look at Response.

To change a GET request: click it in Network, open Headers, and copy the Request URL. Paste it into a new tab, change the number in the address bar, and press Enter. Keep this lab tab open to submit your flag. The Network list itself is not an editable request form.

Seeing HTML, CSS, and JavaScript here is normal: these files run the page in your browser. Select Fetch/XHR to focus on data requests. The expected flags and server code are kept on the server.

A nudge, if you need it

0 / 3 used

Hints keep your XP. Fewer hints earn more stars.

SIMULATED TRAINING APP

▧ HackLab StoreAWelcome, Alice

Your ordersFAKE DATA ONLY

Simulated flaws. Fake data. No SQL runs against a real database.

Loading your mission…

You found the flaw.

Why it worked