WebVerse is a local web & API security lab runner: a desktop app that discovers labs in ./labs/, starts them with Docker Compose, opens them in your browser, and tracks your progress — all on your own machine.
Educational use only. Labs are intentionally vulnerable. Do not expose them to the internet.
Most practice environments are either:
- too heavy to set up,
- too scattered across repos,
- or too “manual” to run repeatedly.
WebVerse is built to make local practice repeatable:
- labs are self-contained
- starting/resetting takes one click
- you can iterate quickly, break things, reset, and try again
- 🧪 Browse included labs (name, difficulty, description, tags)
▶️ One-click Start / Stop / Reset- 🌐 Open in Browser from the UI
- 🧾 View lab status and logs
- ✅ Track progress locally (
progress.db) - 🏁 Flag submission + verification (via
flag_sha256in eachlab.yml)
- Linux or macOS
- Python 3.10+
- Docker + Docker Compose
- Linux: Docker Engine + Compose plugin
- macOS: Docker Desktop
Install Python deps:
pip install -r requirements.txt