Penetration Testing, Security Code Review and Web App Security Exercises

Free PRO CVE Easy Medium Hard XSS Code Review API SSRF HTTP RECON CSRF SQLi

Exercise	Avg. Time	Solved by	Tier
CVE-2023-X48X9 This challenge covers the review of a CVE in a Java codebase and its patch	< 1 Hr.	192	PRO
Python Code Review 04 This challenge covers the review of a simple codebase in Python	--	202	PRO
Python Code Review 02 This challenge covers the review of a simple codebase in Python	--	225	PRO
Python Code Review 01 This challenge covers the review of a simple codebase in Python	< 1 Hr.	265	PRO
Python Code Review 03 This challenge covers the review of a simple codebase in Python	< 1 Hr.	207	PRO
Python Code Review 05 This challenge covers the review of a simple codebase in Python	--	155	PRO
Python Code Review 09 This challenge covers the review of a simple codebase in Python	--	155	PRO
CVE-2023-46XX2 This challenge covers the review of a CVE in a Java codebase and its patch	< 1 Hr.	169	PRO
GHSA-95XX This challenge covers the review of a CVE in a Java codebase and its patch	< 1 Hr.	149	PRO
CVE-2022-4x13x This challenge covers the review of a CVE in a Java codebase and its patch	< 1 Hr.	165	PRO
Java Serialize 06 This exercise is one of our challenges to help you learn Java Serialisation exploitation	2-4 Hr.	56	PRO
API 09 This exercise covers how one can inspect HTTP responses to identify information leaks.	< 1 Hr.	1007	PRO
Java Serialize 04 This exercise is one of our challenges to help you learn Java Serialisation exploitation	< 1 Hr.	117	PRO
Java Serialize 05 This exercise is one of our challenges to help you learn Java Serialisation exploitation	2-4 Hr.	78	PRO
Cache Poisoning 01 This exercise details how to exploit an application vulnerable to cache poisoning	< 1 Hr.	140	PRO
Cache Deception 02 This exercise details how to exploit an application vulnerable to cache deception	< 1 Hr.	132	PRO
CVE-2023-289X6 This challenge covers the review of a CVE in a Java codebase and its patch	< 1 Hr.	150	PRO
CVE-2023-XXX83 This challenge covers the review of a CVE in a Java codebase and its patch	< 1 Hr.	166	PRO
CVE-2023-350XX This challenge covers the review of a CVE in a Java codebase and its patch	< 1 Hr.	168	PRO
CVE-2022-XX910 This challenge covers the review of a CVE in a Java codebase and its patch	< 1 Hr.	155	PRO
CVE-2022-342XX This challenge covers the review of a CVE in a Java codebase and its patch	< 1 Hr.	156	PRO
Cache Deception 01 This exercise details how to exploit an application vulnerable to cache deception	< 1 Hr.	156	PRO
Golang Code Review #02 This challenge covers the review of a snippet of code written in Golang.	< 1 Hr.	182	PRO
Golang Code Review #09 This challenge covers the review of a snippet of code written in Golang.	< 1 Hr.	149	PRO
Golang Code Review #05 This challenge covers the review of a snippet of code written in Golang.	< 1 Hr.	161	PRO
CVE-202X-2561X This challenge covers the review of a CVE in a Java codebase and its patch	< 1 Hr.	170	PRO
CVE-2023-25X4X This challenge covers the review of a CVE in a Java codebase and its patch	< 1 Hr.	155	PRO
CVE-2022-X50X6 This challenge covers the review of a CVE in a Java codebase and its patch	< 1 Hr.	159	PRO
CVE-2022-4504x This challenge covers the review of a CVE in a Java codebase and its patch	< 1 Hr.	233	PRO
CVE-2022-x0x08 This challenge covers the review of a CVE in a Java codebase and its patch	< 1 Hr.	185	PRO

‹ 1 … 4 5 6 7 8 9 10 … 25 ›

Showing 181–210 of 734 exercises