Lab Outline

1. SQL injection
- SQL injection vulnerability allowing login bypass
- SQL injection vulnerability in WHERE clause allowing retrieval of hidden data


2. Authentication vulnerabilities
- Vulnerabilities in password-based login LABS
- Vulnerabilities in multi-factor authentication LABS
- Vulnerabilities in other authentication mechanisms LABS

3. Path traversal
- File path traversal, simple case
- File path traversal, traversal sequences blocked with absolute path bypass
- File path traversal, validation of start of path

4. Command injection
- OS command injection, simple case
- Blind OS command injection with time delays

5. Business logic vulnerabilities
- Excessive trust in client-side controls
- High-level logic vulnerability
- Inconsistent security controls
- Flawed enforcement of business rules

6. Information disclosure
- Information disclosure in error messages
- Information disclosure on debug page
- Source code disclosure via backup files
- Authentication bypass via information disclosure

7. Access control vulnerabilities
- Unprotected admin functionality
- Unprotected admin functionality with unpredictable URL
- User role controlled by request parameter

8. File upload vulnerabilities
- Remote code execution via web shell upload
- Web shell upload via Content-Type restriction bypass

9. Race conditions
- Limit overrun race conditions

10. Server-side request forgery (SSRF)
- Basic SSRF against the local server
- Basic SSRF against another back-end system