Three bugs, increasing difficulty. Pick one and launch.
A student portal with a login and per-student invoices. Retrieve the flag from an invoice that isn't yours.
Launch challenge →A course portal that echoes your input. Can you make it run your code?
Launch challenge →A campus store that lists products by category. Retrieve the flag hidden in a record that never shipped.
Launch challenge →