Flask Insecure Deserialization Lab

Learn about insecure deserialization vulnerabilities through hands-on experience

🚀 Getting Started

1

Registration

Create a normal user account through the registration process. Observe how user data is stored in cookies as serialized objects.

2

Understanding the Vulnerability

Learn how serialized data in cookies can be manipulated. Explore the insecure deserialization process used in the application.

3

Exploitation

Attempt to modify serialized data to achieve privilege escalation or code execution. Understand the security implications of insecure deserialization.

Start Here

Don't have an account? Register first to begin the lab exercise.