Cybersecurity Demonstration Lab
Authorized · EducationalAn interactive, self-contained lab for demonstrating core web-security topics side by side — how each attack works and how developers prevent it. Everything uses fictional data. Pick a lab to begin.
SQL Injection Lab
A simulated login that builds SQL unsafely. Watch a classic
' OR '1'='1 payload bypass authentication, then flip to
parameterized queries and see it neutralized.
XSS Testing Lab
An interactive comment board. Submit a script payload and see it execute inside a sandboxed, CSP-restricted preview — then switch to output encoding and watch it render as harmless text.
Start Lab →API Security Lab
A REST console demonstrating broken authentication, BOLA/IDOR, excessive permissions, missing rate limiting and API-key exposure — each with a secure counterpart.
Start Lab →MITM Attack Lab
An interactive communication simulation between Alice and Bob. Watch an unauthorized observer intercept plaintext HTTP, then switch to HTTPS/TLS encryption to protect data in transit.
Start Simulation →DDoS Attack Lab
A simulated server under a growing flood of traffic. Watch capacity run out and real users lose service, then activate layered defenses and see the service recover. Runs entirely as a local mathematical model.
Start Simulation →Lab environment
RunningThis is an intentionally vulnerable teaching site. Do not enter real names, passwords or personal details. Comments are visible to other visitors and are cleared from time to time.