Penetration Testing, Security Code Review and Web App Security Exercises

Free PRO CVE Easy Medium Hard XSS Code Review API SSRF HTTP RECON CSRF SQLi

Exercise	Avg. Time	Solved by	Tier
Python Snippet #04 This challenge covers the review of a snippet of code written in Python	< 1 Hr.	1726	PRO
Python Snippet #05 This challenge covers the review of a snippet of code written in Python	< 1 Hr.	1906	PRO
CVE-2021-39x3x This challenge covers the review of a CVE and its patch	< 1 Hr.	653	PRO
Java Snippet #05 This challenge covers the review of a snippet of code written in Java	< 1 Hr.	1525	PRO
Java Snippet #04 This challenge covers the review of a snippet of code written in Java	< 1 Hr.	1666	PRO
CVE-2009-3x8x This challenge covers the review of a CVE and its patch	< 1 Hr.	806	PRO
H2 RCE This challenge covers how to gain code execution by leveraging an H2 database in a Java application	< 1 Hr.	138	PRO
TypeScript Snippet #08 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1178	PRO
TypeScript Snippet #06 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1167	PRO
TypeScript Snippet #04 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1279	PRO
TypeScript Snippet #07 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1109	PRO
CVE-2008-4x9x This challenge covers the review of a CVE and its patch	< 1 Hr.	756	PRO
Log4j RCE II This exercise is one of our challenges to help you learn Java Serialisation exploitation	1-2 Hr.	181	PRO
Log4j RCE This challenge covers the latest RCE in Log4j	1-2 Hr.	307	PRO
CVE-2021-4379x This challenge covers the review of a CVE and its patch	< 1 Hr.	755	PRO
CVE-2008-1x3x This challenge covers the review of a CVE and its patch	< 1 Hr.	1025	PRO
TypeScript Snippet #02 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1468	PRO
TypeScript Snippet #01 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1515	PRO
CVE-2021-41773 This challenge covers how to read arbitrary files by leveraging CVE-2021-41773	< 1 Hr.	571	PRO
HTTP 39 This challenge covers how to send specific HTTP requests	< 1 Hr.	2926	PRO
CVE-2006-4xxx_ii This challenge covers the review of a CVE and its patch	< 1 Hr.	676	PRO
CVE-2006-4xxx This challenge covers the review of a CVE and its patch	< 1 Hr.	790	PRO
PHP Snippet #06 This challenge covers the review of a snippet of code written in PHP	< 1 Hr.	1876	PRO
API 06 API Angular This exercise covers how one can inspect JavaScript code to identify unused endpoints.	< 1 Hr.	2038	PRO
Java Snippet #03 This challenge covers the review of a snippet of code written in Java	< 1 Hr.	1688	PRO
Java Snippet #01 This challenge covers the review of a snippet of code written in Java	< 1 Hr.	1896	PRO
CVE-2021-37xxx This challenge covers the review of a CVE and its patch	< 1 Hr.	756	PRO
PHP Snippet #01 This challenge covers the review of a snippet of code written in PHP	< 1 Hr.	2547	PRO
PHP Snippet #03 This challenge covers the review of a snippet of code written in PHP	< 1 Hr.	1999	PRO
HTTP 35 This challenge covers how to send specific HTTP requests	< 1 Hr.	2995	PRO

‹ 1 2 3 4 5 6 … 9 ›

Showing 61–90 of 270 exercises