“Vulnerable web lab — login, CAPTCHA, IP & OS injection.”