Two kinds of focused labs per module — drill a technique, then learn to hunt it.
A naked lab is stripped to the bone: a couple of features and exactly one exploit, with nothing else to distract you. The vulnerability is roughly where you’d expect it — the point isn’t to find it, it’s to practice the raw technique until it’s automatic: the exact request to send, the exact payload for the context, the exact thing to look for in the response. Do these first to learn each bug class cold. They solve fast.
A methodology lab is realistic: real functionality, several inputs, and deliberate decoys — endpoints that look promising but are properly secured. The bug is not obvious and not labelled. You have to recon the app, form hypotheses, probe systematically (marker-first, two-account replay, OOB confirmation…), and develop a repeatable method. This is what real targets and the exam feel like — the skill being trained is hunting, not payload-recall.
How to use them: run the naked labs in a module first to learn every technique in isolation, then take on that module’s methodology lab to practise finding the bug among noise. Each pack has both, and a /progress tally. No flags.
More hands-on practice → HackXpert Labs ↗