SQL Injection, XSS, brute force, and command injection—attack and defend real web apps inside a safe Docker-based lab.