CTF CHALLENGE · web · Medium · 900 pts
UniMart Peakline — Sports
A full sports-gear storefront (React + PHP API + admin) from the UniMart stack, built as a deliberately-vulnerable practice target. Work through the storefront and its API, find and exploit the OWASP Top 10 flaws, and capture every flag to fully compromise the application. Each flag is one attack vector — submit them in any order.
Objectives
- ["Map the storefront
- its API and the admin panel"
- "Find one flaw per flag (7 flags total)"
- "Chain the flaws to reach administrative control"]