Introduction & Setup
To safely practice the vulnerabilities detailed in this module, we will utilize a containerized environment powered by Docker and Docker Compose. This...
Web Vulnerabilities Lab
query = f'SELECT * FROM users WHERE username = '{username}''
API Vulnerabilities Lab
(Covered similarly in the Web Lab, ensure authorization checks validate object ownership against the current user context.)
AI & ML Vulnerabilities Lab
system_prompt = 'You are a helpful customer service bot. The secret company password is 'flag{pr0mpt_h4ck3d}'.'
Cloud & IaC Vulnerabilities Lab
RUN apt-get update && apt-get install -y curl
Hands-on Full Stack Lab
This lab presents a self-contained, multi-stage Capture The Flag scenario. You must chain together multiple vulnerabilities to gain full administrativ...
References & Further Practice
Once you have mastered the local CTF challenges, continue your practice with these industry-standard vulnerable applications:
CTF Challenges & Vuln App Lab
Welcome to the CTF (Capture The Flag) Challenges & Vulnerable App Lab section of the AppSec Atlas. This module is designed to provide hands-on, practi...