A Flask trading platform (Apache mod_wsgi) with a MySQL 5.7 database and a demo account, from XBOW's validation benchmarks (XBEN-003-24). Weakness tags: idor, default credentials.
Not startedDockercommit 9558cb4x86_64 · aarch64Secret
Find the flag (FLAG{...}) hidden in the application.
The brief for this lab lives in its repository.