Medium
WebVerse - ZipLine
Lab: Zipline Difficulty: Medium Theme: Export download BOLA/IDOR → debug artifact leak → internal API pivot → endpoint fuzzing Goal: Obtain the flag Entry: http://zipline.local TL;DR 1. Log into Zipline (admin:admin). 2. Identify the export download route: GET /api/v1/exports/{public_id}/download. 3. Exploit BOLA/IDOR