OWASP Shop Lab (PHP) mode: vuln switch login
Training target. This page is intentionally vulnerable. Keep this deployment private - see README.

LAB hint panel - login

  • A01-02 Authentication bypass
    username: admin' --
  • A07-01 Username enumeration
    wrong password for a known user
  • A07-05 Remember-me stores plaintext password
    inspect cookies
  • A01-11 Open redirect via next
    ?next=https://example.com

Login

Demo accounts (A02: credentials published in the page)
admin/admin123 alice/alice123 bob/123456 carol/password
Try admin' -- as the username.
LAB