Hands-on lab
The Real Board
A real forum with a real SQL injection in its search. Union the private messages into the results, find the reviewer verification token that is yours alone, and submit it. The flag you recover is unique to you — a copied one is refused.
Labs give each member a unique flag, so you need an account to take one. Sign in or create one — a username and a passphrase, no email.