PentesterLab: Our exercises

PentesterLab will help you

Category:

API 07

API Badge

CVE-2021-40438

Brown Badge

CVE-2021-41773

Brown Badge

CVE-2021-41773 II

Brown Badge

HTTP 36

HTTP Badge

HTTP 37

HTTP Badge

HTTP 38

HTTP Badge

HTTP 39

HTTP Badge

HTTP 40

HTTP Badge

CVE-2006-4xxx

Code Review Badge

CVE-2006-4xxx_ii

Code Review Badge

PHP Snippet #04

Code Review Badge

PHP Snippet #05

Code Review Badge

PHP Snippet #06

Code Review Badge

API 06

API Badge

CVE-2021-37xxx

Code Review Badge

PHP Snippet #01

Code Review Badge

PHP Snippet #02

Code Review Badge

PHP Snippet #03

Code Review Badge

HTTP 31

HTTP Badge

HTTP 32

HTTP Badge

HTTP 35

HTTP Badge

HTTP 34

HTTP Badge

HTTP 33

HTTP Badge

API 05

API Badge

API 04

API Badge

Golang Snippet #1

Code Review Badge

Golang Snippet #02

Code Review Badge

Golang Snippet #03

Code Review Badge

Golang Snippet #04

Code Review Badge

Golang Snippet #05

Code Review Badge

Golang Snippet #06

Code Review Badge

Golang Snippet #07

Code Review Badge

Golang Snippet #08

Code Review Badge

Golang Snippet #09

Code Review Badge

Golang Snippet #10

Code Review Badge

Golang Snippet #11

Code Review Badge

Javascript Snippet #01

Code Review Badge

Javascript Snippet #02

Code Review Badge

Javascript Snippet #03

Code Review Badge

Javascript Snippet #04

Code Review Badge

Javascript Snippet #05

Code Review Badge

Javascript Snippet #06

Code Review Badge

Javascript Snippet #07

Code Review Badge

Python Snippet #01

Code Review Badge

Ruby Snippet #01

Code Review Badge

Ruby Snippet #02

Code Review Badge

Ruby Snippet #03

Code Review Badge

Ruby Snippet #04

Code Review Badge

Ruby Snippet #05

Code Review Badge

Ruby Snippet #06

Code Review Badge

Ruby Snippet #07

Code Review Badge

Ruby Snippet #08

Code Review Badge

Ruby Snippet #09

Code Review Badge

HTTP 26

HTTP Badge

HTTP 27

HTTP Badge

HTTP 28

HTTP Badge

HTTP 29

HTTP Badge

HTTP 30

HTTP Badge

CVE-2020-17xx7

Code Review Badge

Ox Remote Code Execution

Brown Badge

CVE-2020-9x9x

Code Review Badge

HTTP 21

HTTP Badge

HTTP 22

HTTP Badge

HTTP 23

HTTP Badge

HTTP 24

HTTP Badge

HTTP 25

HTTP Badge

HTTP 16

HTTP Badge

HTTP 20

HTTP Badge

HTTP 18

HTTP Badge

HTTP 19

HTTP Badge

HTTP 17

HTTP Badge

CVE-2020-17xx8

Code Review Badge

CVE-2021-22204: Exiftool RCE

Media Badge

SSRF via FFMPEG II

Media Badge

API 03

API Badge

CVE-2020-11xxx

Code Review Badge

OAuth2: Authorization Server XSS II

Authentication / Authorization Badge

HTTP 11

HTTP Badge

HTTP 15

HTTP Badge

HTTP 12

HTTP Badge

HTTP 13

HTTP Badge

HTTP 14

HTTP Badge

API 02

API Badge

Express Local File Read

Brown Badge

OAuth2: Authorization Server XSS

Authentication / Authorization Badge

HTTP 10

HTTP Badge

HTTP 09

HTTP Badge

HTTP 07

HTTP Badge

HTTP 06

HTTP Badge

HTTP 08

HTTP Badge

HTTP 03

HTTP Badge

HTTP 04

HTTP Badge

HTTP 05

HTTP Badge

HTTP 02

HTTP Badge

HTTP 01

HTTP Badge

API 01

API Badge

JSON Web Token XIII

Brown Badge

SAML: Comment Injection II

Authentication / Authorization Badge

Recon 24

Recon Badge

Recon 25

Recon Badge

Recon 26

Recon Badge

SSRF via FFMPEG

Media Badge

SAML: Signature Wrapping II

Authentication / Authorization Badge

RCE via argument injection

Brown Badge

Code Review 16

Code Review Badge

SAML: Signature Wrapping

Authentication / Authorization Badge

Recon 20

Recon Badge

Recon 21

Recon Badge

Recon 22

Recon Badge

Recon 23

Recon Badge

SAML: SAMLResponse forwarding

Authentication / Authorization Badge

CGI and Signature

Brown Badge

Recon 17

Recon Badge

Recon 18

Recon Badge

Recon 19

Recon Badge

Code Review 15

Code Review Badge

Code Review 14

Code Review Badge

CVE-2020-14343: PyYAML unsafe loader

Brown Badge

OAuth2: State Fixation

Authentication / Authorization Badge

Code Review 13

Code Review Badge

CVE-2020-7115: Aruba Clearpass RCE

Brown Badge

Code Review 12

Code Review Badge

OAuth2: Predictable State II

Authentication / Authorization Badge

Recon 13

Recon Badge

Recon 14

Recon Badge

Recon 15

Recon Badge

Recon 16

Recon Badge

EDDSA vulnerability in Monocypher

Brown Badge

Code Review 11

Code Review Badge

OAuth2: Predictable State

Authentication / Authorization Badge

Code Review 10

Code Review Badge

Recon 11

Recon Badge

Recon 12

Recon Badge

Unicode and NFKC

Brown Badge

SAML: Trusted Embedded Key

Authentication / Authorization Badge

Recon 06

Recon Badge

Recon 07

Recon Badge

Recon 08

Recon Badge

CVE-2020-8163: Rails local name RCE

Brown Badge

SAML: Known Key

Authentication / Authorization Badge

Code Review 09

Code Review Badge

Recon 04

Recon Badge

Recon 05

Recon Badge

Recon 01

Recon Badge

OAuth2: Client Server XSS

Authentication / Authorization Badge

Zip symlink

Brown Badge

Code Review 08

Code Review Badge

SAML: Comment Injection

Authentication / Authorization Badge

Unicode and Downcase

Brown Badge

Code Review 07

Code Review Badge

Java Serialize 01

Java Serialize Badge

Unicode and Uppercase

Brown Badge

Code Review 06

Code Review Badge

Cross-Site Leak

Orange Badge

From SQL injection to Shell III: PostgreSQL Edition

Brown Badge

OAuth2: Client CSRF II

Authentication / Authorization Badge

XSS Include

Orange Badge

OAuth2: Client CSRF

Authentication / Authorization Badge

Code Review 05

Code Review Badge

Code Review 04

Code Review Badge

JS Prototype Pollution

Brown Badge

OAuth2: Authorization Server CSRF

Authentication / Authorization Badge

Code Review 03

Code Review Badge

SSRF in PDF generation

Media Badge

OAuth2: Github HTTP HEAD

Authentication / Authorization Badge

SVG XSS

Orange Badge

Apache Pluto RCE

Brown Badge

JSON Cross-Site Request Forgery

Orange Badge

Cross-Site Request Forgery

Orange Badge

Code Review 02

Code Review Badge

postMessage() IV

Orange Badge

Spring Actuators

Brown Badge

postMessage() III

Orange Badge

postMessage() II

Orange Badge

PHP phar://

Brown Badge

Signing Oracle

Brown Badge

Length Extension Attack

Green Badge

JSON Web Encryption

Brown Badge

postMessage()

Orange Badge

CVE-2019-5418

Green Badge

Cross-Site WebSocket Hijacking

Orange Badge

JWT XII

Green Badge

Cross-Origin Resource Sharing II

Orange Badge

JWT XI

Green Badge

cve-2019-5420 II

Green Badge

OAuth2: Client OpenRedirect

Authentication / Authorization Badge

CVE-2019-5420

Green Badge

JWT X

Green Badge

GraphQL: SQL Injection

Green Badge

OAuth2: Authorization Server OpenRedirect

Authentication / Authorization Badge

JWT IX

Green Badge

Gogs RCE II

Green Badge

JWT VIII

Green Badge

SAML: Signature Stripping

Authentication / Authorization Badge

GraphQL Introspection

Green Badge

Gogs RCE

Green Badge

Android 07

Android Badge

Android 06

Android Badge

Android 05

Android Badge

Ruby 2.x Universal RCE Deserialization Gadget Chain

Green Badge

CVE-2018-10933: LibSSH auth bypass

Android 04

Android Badge

Android 03

Android Badge

From SQL injection to Shell III

Green Badge

Android 02

Android Badge

IDOR to Shell

Green Badge

Android 01

Android Badge

Introduction to CSP

Orange Badge

CVE-2018-11235: Git Submodule RCE

Orange Badge

Git Information Leak II

Blue Badge

Git Information Leak

Blue Badge

JWT VII

Blue Badge

CVE-2016-5386: HTTPoxy/Golang HTTProxy namespace conflict

Orange Badge

CBC-MAC II

Blue Badge

JWT VI

Blue Badge

CVE-2018-6574: go get RCE

Orange Badge

JWT V

Blue Badge

CVE-2018-0114

Blue Badge

JWT IV

Blue Badge

CBC-MAC

Blue Badge

JWT III

Blue Badge

Introduction to code review

S2-052

Blue Badge

SAML: Introduction

Authentication / Authorization Badge

CVE-2016-10033: PHPMailer RCE

Yellow Badge

Cipher block chaining

Yellow Badge

Struts s2-045

Yellow Badge

CVE-2016-2098

Yellow Badge

CVE-2014-4511: Gitlist RCE

ECDSA

Capture-The-Flag Badge

Werkzeug DEBUG

Capture-The-Flag Badge

Padding Oracle

Capture-The-Flag Badge

Unickle

Capture-The-Flag Badge

CVE-2015-3224

Capture-The-Flag Badge

Luhn

Capture-The-Flag Badge

CVE-2013-0156: Rails Object Injection

Serialize Badge

JSON Web Token II

Yellow Badge

CVE-2016-0792

Serialize Badge

ObjectInputStream

Serialize Badge

XMLDecoder

Serialize Badge

CVE-2014-1266

Intercept Badge

CVE-2011-0228

Intercept Badge

Intercept 03

Intercept Badge

Intercept 02

Intercept Badge

Intercept 01

Intercept Badge

Struts devMode

JSON Web Token

White Badge

Cross-Origin Resource Sharing

API to Shell

Serialize Badge

Pickle Code Execution

White Badge

Play XML Entities

Yellow Badge

CVE-2014-6271/Shellshock

White Badge

Play Session Injection

Yellow Badge

CVE-2007-1860: mod_jk double-decoding

White Badge

XSS and MySQL FILE

Electronic Code Book

White Badge

Web for Pentester II

From SQL Injection to Shell II

CVE-2012-6081: MoinMoin code execution

Web for Pentester

Axis2 Web service and Tomcat Manager

CVE-2008-1930: Wordpress 2.5 Cookie Integrity Protection Vulnerability

From SQL Injection to Shell: PostgreSQL edition

Rack Cookies and Commands injection

Linux Host Review

CVE-2012-2661: ActiveRecord SQL injection

CVE-2012-1823: PHP CGI

PHP Include And Post Exploitation

From SQL Injection to Shell

White Badge

Code Review 01

Code Review Badge

Recon 00

Recon Badge

Recon 02

Recon Badge

Recon 03

Recon Badge

Recon 10

Recon Badge

Recon 09

Recon Badge

Code Review 17

Code Review Badge

Java Snippet #01

Code Review Badge

Java Snippet #02

Code Review Badge

Java Snippet #03

Code Review Badge

Android 08

Android Badge

Ready to get PRO?

Learn faster by getting PentesterLab PRO.

GET PENTESTERLAB PRO $19.99/month