darkreading.com • 2026-06-18 18:20
FIFA Bug Exposes World Cup Streams to Remote Takeover
A hacker could have "Rickrolled" the World Cup — or worse — thanks to FIFA's unenforced Entra access controls.
Read original
ratnews.thexssrat.com is an intentionally vulnerable web application built by The XSS Rat as a safe, legal environment for practising offensive security techniques. You have explicit permission to attack this application. Do not use what you learn here against systems you do not own.
Real bug bounty hunters and penetration testers need live targets to sharpen their skills. This lab mirrors a realistic content-delivery stack — a FastAPI app with a database, user accounts, an admin API, and RSS aggregation — so you can practise against something that behaves like a real application, document your findings, and build a repeatable methodology without any legal risk.
next parameter handling after login