GLITCH//
root@glitch:~# ./start_workshop.sh

GLITCH // WEB EXPLOITATION

Challenges

Three bugs, increasing difficulty. Pick one and launch.

CH01
Broken Access Control easy

Not Your Invoice

A student portal with a login and per-student invoices. Retrieve the flag from an invoice that isn't yours.

Launch challenge →
CH02
Cross-Site Scripting medium

Say My Name

A course portal that echoes your input. Can you make it run your code?

Launch challenge →
CH03
SQL Injection hard

Hidden Records

A campus store that lists products by category. Retrieve the flag hidden in a record that never shipped.

Launch challenge →