◉ Official answer
🎯 The Redirect Trap (General · Level 1 · +50 XP)
A post-login redirection mechanism redirects users to an arbitrary external URL supplied in a return_to parameter, facilitating phishing attacks.
Learning & Defense Goals:
🎯 Launch Isolated Sandbox on Cyber Lab →
Community Discussion Rules: Discuss methodologies, discovery tactics, and architectural hardening. Please do not post raw flags directly. Share your production remediation code!