Practice range. VulnShop breaks on purpose so scanners have something to find. Keep it on 127.0.0.1 — never put it on the internet.
Vulnshop. Merch for people who read the source

Greeter · renders whatever it is handed

Hello, 49!

That name went into the template source before rendering, so HTML tags run as markup and {{ ... }} runs as a template expression.

← Back to the security lab