Capture the FlagEasy
Verbose Errors
Lab for How Web Apps Get Hacked: The OWASP Top 10
Scenario
The gentlest way in is often the app telling you too much. Send an input the app didn't expect and watch how it responds, a badly-handled error can spill database details, file paths, and secrets. This is 'Security Misconfiguration' from the OWASP Top 10.
Objective
Trigger a verbose error and read the information the app leaks in it.
lab ~ verbose errorsnothing real runs
booting lab sandbox…
This sandbox is fully emulated in your browser, nothing real runs and nothing leaves your machine. Type help to see the tools available.