◉ Official answer
🎯 Real-World: Corner Shop Mini-Market (Web · Level 2 · +200 XP)
A full mock retail web app running inside an isolated sandbox (`missions/corner-shop/`). It features a catalog, cart, user profile, and support ticket flow. Identify 2 vulnerabilities (parameter tampering + reflected XSS) to capture the root admin flag.
Learning & Defense Goals:
- Explore the Corner Shop storefront flow
- Find price tampering in the checkout cart
- Exploit the ticket preview to reveal the admin receipt flag
🎯 Launch Isolated Sandbox on Cyber Lab →
Community Discussion Rules: Discuss methodologies, discovery tactics, and architectural hardening. Please do not post raw flags directly. Share your production remediation code!