XSSRats

Back

🎯 Free Vulnerable Labs – Practice on safe targets

No login. No paywall. Ethical use only.

• RatBank – Financial logic challenges: http://ratbank.thexssrat.com/

• RatPackPark – Theme park management (BAC, logic flaws): http://ratpackpark.thexssrat.com/

• RatTrack – Multi‑tenant asset tracking (RBAC, enum): https://rattrack.thexssrat.com/

• RatNews – Hackable news aggregator: http://ratnews.thexssrat.com/

• ratMania – Webshop & backend antics: http://ratmania.thexssrat.com/

• RatDo – Resetting todo app, public exploits: http://ratdo.thexssrat.com/

• ratforum – The forum made to get pwned: http://ratforum.thexssrat.com/