Each challenge simulates a real vulnerability. Exploit it, then ask the AI tutor to explain the root cause and fix.