⚠ DELIBERATELY VULNERABLE — WAFio demo target. Isolated container.
Login
Example payloads — WAF demo (via domain → blocked 403 · direct :8081 → works)
- SQLi bypass (Username)
x' OR '1'='1'-- - - SQLi bypass alt
admin'-- - - Brute-force (login protection)
3 fails / 60 s -> lockout 300 s
demo: admin / admin123