Sign in Create Account

Exercises

Exercise Avg. Time Difficulty Solved by Tier
API Payments 01 API
This exercise covers a simple payments bypass.
 < 1 Hr. easy 2009 PRO
CVE-2022-26xx9
This challenge covers a vulnerable snippet in a real Java application
 < 1 Hr. medium 629 PRO
Python Snippet #09
This challenge covers the review of a snippet of code written in Python
 < 1 Hr. easy 1825 PRO
Python Snippet #08
This challenge covers the review of a snippet of code written in Python
 < 1 Hr. easy 1616 PRO
Python Snippet #07
This challenge covers the review of a snippet of code written in Python
 < 1 Hr. easy 1696 PRO
Mongo IDOR
This challenge covers how to exploit an IDOR when Mongo IDs are used
< 1 Hr. medium 1197 PRO
CVE-2005-2x8x
This challenge covers the review of a CVE and its patch
 < 1 Hr. hard 646 PRO
CVE-2008-5x8x_ii
This challenge covers the review of a CVE and its patch
 < 1 Hr. medium 649 PRO
Golang Snippet #01
This challenge covers the review of a snippet of code written in Golang
 < 1 Hr. easy 1808 PRO
Java Snippet #06
This challenge covers the review of a snippet of code written in Java
 < 1 Hr. medium 1425 PRO
Python Snippet #06
This challenge covers the review of a snippet of code written in Python
 < 1 Hr. easy 1829 PRO
CVE-2022-21449 JWT
This exercise covers the exploitation of CVE-2022-21449 against a Java Application relying on JWT
 < 1 Hr. medium 183 PRO
CVE-2021-33564 Argument Injection in Ruby Dragonfly
This exercise covers how you can get arbitrary file read using CVE-2021-33564 against Refinery CMS
 < 1 Hr. medium 151 PRO
Mongo IDOR II
This challenge covers how to recover a Mongo ID to leverage an IDOR
 < 1 Hr. medium 352 PRO
CVE-2021-45xx9
This challenge covers a vulnerable snippet in a real Python application
 < 1 Hr. easy 790 PRO
PHP Snippet #09
This challenge covers the review of a snippet of code written in PHP
 < 1 Hr. medium 1567 PRO
PHP Snippet #08
This challenge covers the review of a snippet of code written in PHP
 < 1 Hr. hard 1661 PRO
PHP Snippet #07
This challenge covers the review of a snippet of code written in PHP
 < 1 Hr. easy 1767 PRO
Python Snippet #03
This challenge covers the review of a snippet of code written in Python
 < 1 Hr. easy 1872 PRO
Python Snippet #04
This challenge covers the review of a snippet of code written in Python
 < 1 Hr. easy 1726 PRO
Python Snippet #05
This challenge covers the review of a snippet of code written in Python
 < 1 Hr. easy 1906 PRO
CVE-2021-39x3x
This challenge covers the review of a CVE and its patch
 < 1 Hr. easy 653 PRO
CVE-2022-21724: JDBC RCE PostgreSQL
This challenge covers how to gain code execution by leveraging a JDBC connection string with PostgreSQL
 < 1 Hr. medium 194 PRO
Java Snippet #04
This challenge covers the review of a snippet of code written in Java
 < 1 Hr. easy 1666 PRO
Java Snippet #05
This challenge covers the review of a snippet of code written in Java
 < 1 Hr. easy 1525 PRO
Ox Remote Code Execution II
This exercise covers how you can gain code execution when an application is using Ox to deserialize data and is running on Ruby 2.7
 2-4 Hr. hard 40 PRO
CVE-2009-3x8x
This challenge covers the review of a CVE and its patch
 < 1 Hr. easy 806 PRO
HTTP 43
This challenge covers how to send specific HTTP requests
 < 1 Hr. medium 2650 PRO
HTTP 42
This challenge covers how to send specific HTTP requests
 < 1 Hr. medium 2743 PRO
HTTP 41
This challenge covers how to send specific HTTP requests
 < 1 Hr. medium 2717 PRO
‹ 1 … 7 8 9 10 11 12 13 … 25 ›
Showing 271–300 of 734 exercises