About this lab

This application intentionally contains the OWASP Top 10 vulnerability classes. It is meant to be deployed behind a WAF so you can validate that your WAF, Rate Limiting and API Shield configuration behaves as expected.

Do not deploy this on a domain that hosts anything real.