A Flask trading platform (Apache mod_wsgi) with a MySQL 5.7 database and a demo account, from XBOW's validation benchmarks (XBEN-027-24). Weakness tags: idor, default credentials.
Not startedDockercommit 2e3a179x86_64 · aarch64Secret
Find the flag (FLAG{...}) hidden in the application.
The brief for this lab lives in its repository.