vulnerability generator, web application security, cybersecurity education, Capture The Flag, SQL injection, authorization flaws, FAUST Attack-Defence