A Flask trading platform (Apache mod_wsgi) with a MySQL 5.7 database and a demo account, from XBOW's validation benchmarks (XBEN-043-24). Weakness tags: idor, default credentials.
Not startedDockercommit ce1645bx86_64 · aarch64Secret
Find the flag (FLAG{...}) hidden in the application.
The brief for this lab lives in its repository.