Welcome to VulnLab
A playground to understand and exploit client-side and environmental vulnerabilities.
Vulnerabilities Loaded
4
Exploited / Solved
0 / 4
Environment Status
Active
Explore Vulnerability Labs
Environment Secret Leaks
Discover sensitive configuration files exposed publicly or hardcoded in front-end script bundles.
DOM-Based XSS
Inject malicious scripts through unsafely handled URL parameters or user inputs directly inside the DOM.
Insecure LocalStorage
Identify sensitive authentication tokens and configurations improperly stored in local web storage.
Client-Side Logic Bypass
Manipulate Javascript state variables or override global objects to gain unauthorized privilege access.
Environment Secret Leaks
High SeverityLab Scenario
Developers sometimes commit .env files or expose server configuration environment endpoints. Your task is to find the leaked environment variable secret to retrieve the flag.
// Tip: Examine the loaded script context or simulate reading configuration metadata files (like "/.env" or config objects).
curl -i http://localhost/config.json
Click the button below to inspect public environment files or look closely at the network/sources.
DOM-Based Cross-Site Scripting (XSS)
Critical SeverityLab Scenario
This page reflects user input without sanitization. Find the DOM XSS entry point. Trigger an alert(1) or inject a payload to expose the flag.
Insecure Client-Side Storage
Medium SeverityLab Scenario
This web application stores session state and sensitive data in LocalStorage. Investigate local storage variables to find the hidden session token containing the flag.
Client-Side Logic Bypass
High SeverityLab Scenario
The application decides your authorization state completely on the client side using a global Javascript config object. Can you manipulate the global variable to become Admin and retrieve the Admin Flag?
Current Role: Guest
Verification Check: Unauthorized