CSRF Token Challenge
The shop page issues a CSRF token. Product detail pages only accept the correct token.
Web Scraping Sandbox
Two practice targets: a CSRF-protected product detail flow and a reCAPTCHA v2 login.
reCAPTCHA v2
The login page includes a real checkbox widget. The token must be verified to access the dashboard.
Instagram-style Profile
The profile is protected by a JS challenge cookie, signed media tokens, and rate limits to slow bots.