CTF CHALLENGE · web · Easy · 800 pts
Flower Shop — Online Florist
A full online florist storefront with a PHP backend and admin panel, built as a deliberately-vulnerable practice target. Work through the storefront and its API, find and exploit the OWASP Top 10 flaws, and capture every flag to fully compromise the application. Each flag is one attack vector — submit them in any order.
Objectives
- ["Map the storefront
- its API and the admin panel"
- "Find one flaw per flag (7 flags total)"
- "Chain the flaws to reach administrative control"]