Training target. This page is intentionally vulnerable. Keep this deployment private - see README.

Real outbound fetching is enabled with no allowlist. The server will request internal addresses, cloud metadata endpoints and file:// paths on your behalf.