Web Security Academy
Cyberlium Labs
PortSwigger-style learning path — every lab runs on Cyberlium. Follow the steps below, then pick a lab and earn XP on your account.
0/12
Labs solved
How to solve a lab
- 1
Sign in
Log in with your Cyberlium account so XP is saved (same account on the app and website).
- 2
Pick a topic & lab
Choose a topic on the left (XSS, SQLi, …), then open a lab. Apprentice is easiest; Expert is hardest.
- 3
Access the lab
Press ACCESS THE LAB. A vulnerable practice app opens on Cyberlium — you never leave this site.
- 4
Exploit & find the flag
Read the objective and hint. Use the lab environment (search box, login form, etc.) until you unlock a flag like CYBERLIUM{…}.
- 5
Submit solution
Paste the flag and click Submit solution. Correct flags add XP to your account. Stuck? Open Solution guide on the lab page.
Cross-site scripting (XSS)
Inject scripts into pages viewed by other users. Practice reflected, stored, and DOM-based XSS in Cyberlium sandboxes.
- Apprentice+75 XP
Reflected XSS into HTML context
Reflect a payload in a search box and execute script.
- Apprentice+90 XP
Stored XSS via comment field
Persist a payload in a blog comment that runs for every viewer.
- Practitioner+120 XP
DOM XSS via document.write
Exploit client-side sinks that write untrusted data into the DOM.
Curriculum lesson labs still appear in Learn. This Academy is the PortSwigger-style interactive path — fully hosted on Cyberlium.