Mini-game · Chapter 3

Race Condition Lab

The simulated bank below has a classic time-of-check-to-time-of-use bug. The server reads the balance, waits a moment to "process" the withdrawal, then debits. Two requests that overlap between read and debit both see the original balance. Click fast enough to spend more than you have.

Educational training material. This game demonstrates an attack technique inside a sandboxed quiz UI for security learning. Do not apply these techniques against systems you do not own or have explicit written permission to test.

Round 1 / 3 Score 0 Time 00:00