🧪 CyberLab training instance. Intentionally vulnerable. Simulated only — there is no real shell, no real network access, and no host data behind these bugs.

Resume Upload

HR accepts resumes and supporting documents.

Uploaded files

shell.php

Tip: does the server care what extension you upload?