Shop floor
Everything on the shelves
12 items
Why the last chip works:
q is formatted into the SQL string
with no parameter binding, so a quote ends the literal and the rest runs as query logic.
Errors from a broken payload come back as a 500 with the trace, like /boom.
No. 001
VulnShop T-Shirt
Classic cotton tee with VulnShop logo
$19.99
View →
No. 002
Hacker Hoodie
Comfortable hoodie for late-night coding
$44.99
View →
No. 003
SQL Injection Mug
Ceramic mug with classic payload
$12.99
View →
No. 004
XSS Sticker Pack
5 vinyl stickers for your laptop
$7.99
View →
No. 005
Buffer Overflow Beanie
Keeps your stack warm
$22.99
View →
No. 006
RCE Tote Bag
Carry your exploits in style
$15.99
View →
No. 007
IDOR Keychain
Access any order with this key
$5.99
View →
No. 008
XXE XML Parser
Parses external entities for you
$29.99
View →
No. 009
Path Traversal Socks
Step up the directory tree
$9.99
View →
No. 010
Open Redirect Hat
Redirects compliments to your face
$17.99
View →
No. 011
Admin Panel Pin
Enamel pin for unauthorized access
$6.99
View →
No. 012
Stack Trace Tee
Wear your errors proudly
$21.99
View →