This is a Capture The Flag exercise built on a reverse proxy for authorized security assessments.
Your goal: find as many vulnerabilities as possible in the target application — SQL injection, XSS, SSRF, IDOR, auth bypass, path traversal, and anything else you can surface.
Create a session below, then use Copy Prompt to hand the target off to an agent. Log every finding to findings.md.