Author

Hamza Hashim

Room overview

This guided room uses a deliberately vulnerable product catalogue to teach SQL injection discovery, UNION enumeration, flag retrieval, and parameterized remediation.

After both required flags are submitted, the workspace reveals the SSH credential used to inspect and patch the application.