Do the labs execute real exploits on the VPS?
No. Production uses controlled simulators that preserve exploit reasoning while preventing submitted code from executing on the host. Docker Compose remains available for local platform testing.
Support
Frequently Asked Questions
Short answers to the questions learners most often need resolved.
Why does another learner flag not work?
Flags are generated from the learner account and challenge. They cannot be shared between accounts, which keeps progress and certificates attributable to one learner.
When is the certificate available?
After the account has completed all 150 challenges. Both language versions share the same verification identifier.
Where can I report a problem?
Email kontakt@securitybeztabu.pl with the subject SBTVulnLab. Include the affected exercise, what you expected, and what happened.