Sandbox · vulnerable test surface enabled
⌬

thlab Suite

Sandbox · v0.3

⌬ console

Choose an application

Six working applications.
One sandbox surface to test them.

Each tile opens a fully-functional product clone — banking, e-commerce, government services, airline, billing, retail. Real forms, real API endpoints, real session state. Every request is authentic traffic for upstream WAF, bot management, DDoS, API security, DAM, and DSF telemetry.

6

Applications

Independently themed

30+

Real endpoints

Including 9 vulnerable surfaces

9

Test surfaces

SQLi · XSS · RCE · SSRF · Path · Upload · 3× DDoS

0

Mocked layers

Cookies, sessions, real SQLite