We'll help you get to the Next Level!

This challenge covers the review of a CVE in a golang codebase and its patch

This challenge covers the review of a CVE in a golang codebase and its patch

This challenge covers the review of a CVE in a golang codebase and its patch

This challenge covers the review of a CVE in a java codebase and its patch

This challenge covers the review of a CVE in a java codebase and its patch

This challenge covers the review of a CVE in a java codebase and its patch

This exercise covers how one can leverage latex when pdflatex is used with the --shell-escape option to gain command execution.

This challenge covers the review of a snippet of code written in Golang.

This challenge covers the review of a CVE in a golang codebase and its patch

This challenge covers the review of a CVE in a golang codebase and its patch

This challenge covers the review of a CVE in a python codebase and its patch

This challenge covers the review of a CVE in a python codebase and its patch

This challenge covers the review of a CVE in a python codebase and its patch

This challenge covers the review of a CVE in a python codebase and its patch

This challenge covers the review of a CVE in a Golang codebase and its patch

This challenge covers the review of a CVE in a Golang codebase and its patch

This challenge covers the exploitation of tag truncation on GCM

This exercise covers how one can leverage image processing in ActiveStorage to gain command execution.

This challenge covers the review of a CVE in a Python codebase and its patch

This challenge covers the review of a CVE published in 2025 in a go codebase and its patch

This challenge covers the review of a CVE discovered in 2025 in a golang codebase and its patch

This challenge covers the review of a CVE in a Go codebase and its patch. The goal is to review the code to find the security issue.

This challenge covers the review of a CVE in a Golang project and its patch

This challenge covers the review of a CVE in a Golang project

This challenge covers the review of a CVE in a Python codebase and its patch

This challenge covers the review of a CVE in a Python codebase and its patch

This challenge covers the review of a vulnerable snippet of Golang and has been created to help improve your security code review skills.

This challenge covers the review of a snippet of code written in Golang and has been created to help improve your security code review skills.

This challenge covers the review of a simple snippet of code written in Go.

This exercise covers the exploitation of CVE-2025-25291 (impacting ruby-saml)

This exercise covers the exploitation of CVE-2025-29775 (impacting xml-crypto) without XMLResponse

This challenge is part of our golang code review challenges designed to teach you security code review by reviewing patches

This challenge covers the review of a CVE in a golang codebase and its patch

This challenge covers the review of a CVE (original vulnerable code and diff) of a real go codebase

This challenge is part of our go code review challenges designed to teach you security code review by reviewing patches

This exercise covers the exploitation of CVE-2025-29775 (impacting xml-crypto)

This challenge covers the review of a CVE in a go codebase and its patch

This challenge covers the review of a CVE in a Go codebase and its patch

This challenge covers the review of a snippet of code written in Golang.

This challenge covers the review of a CVE in a go codebase and its patch

This exercise covers how to bypass a weak JWT Revocation Mechanism.

This challenge covers the review of a CVE in a Go codebase and its patch

Leverage a weak implementation of lowercase to access arbitrary files

Leverage a weak implementation of lowercase to access arbitrary files

This exercise covers how to exploit an authorization issue in an API.

This exercise covers how to exploit an authorization issue in an API.

This exercise covers how to exploit an authorization issue in an API.

This exercise covers how to exploit an authorization issue in an API.

This exercise covers how to exploit an authorization issue in an API.

This exercise covers a simple authorization issue in a GraphQL application.

This exercise covers a simple authorization issue in a GraphQL application.

This challenge covers the review of a snippet of code written in Golang.

This challenge covers the review of a snippet of code written in Golang.

This challenge covers the review of a CVE in a Golang codebase and its patch

This challenge covers the review of a CVE in a Golang codebase and its patch

This challenge covers the review of a CVE in a Golang codebase and its patch

This exercise covers how to exploit an ORM leak vulnerability

This challenge covers the review of a CVE in a Golang codebase and its patch

This challenge covers the review of a CVE in a Golang codebase and its patch

This challenge covers the review of a CVE in a Golang codebase and its patch

This exercise covers how to exploit an ORM leak vulnerability

Authentication Bypass using an SQL injection without or 1=1

This challenge covers the review of a CVE in a Go codebase and its patch

This challenge covers the review of a CVE in a Go codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

Find and exploit a Golang vulnerability inspired by CVE-2022-31683

This challenge covers the review of a simple codebase in Java

This challenge covers the review of a simple codebase in Java

This challenge covers the review of a simple codebase in Java

This exercise covers how to exploit a simple ORM leak.

This challenge covers the review of a simple codebase in Java

This challenge covers the review of a simple codebase in Java

This challenge covers the review of a simple codebase in Java

This challenge covers the review of a simple codebase in Java

This challenge covers the review of a CVE in a Java codebase and its patch

Leverage SQL LIKE to gain access to sensitive information

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

Exploit CVE-2022-0415 to gain code execution in Gogs

This challenge covers the review of a simple codebase in Java

This challenge covers the review of a simple codebase in Java

This challenge covers the review of a simple codebase in Java

Find the XSS by leveraging backreferences in a regular expression

Leverage a PHP trick to bypass CSP

This exercise covers a complex filter bypass in API.

This exercise covers how to exploit a leaked encrypted password with an API.

This exercise covers how to exploit a leaked encrypted password with an API.

This challenge covers the review of a simple codebase in Java

This challenge covers the review of a simple codebase in Java

This challenge covers the review of a simple codebase in Java

This exercise covers a common filter bypass in API.

This exercise covers a common filter bypass in API.

This exercise covers a common filter bypass in API.

This challenge covers the review of a simple codebase in Java

This challenge covers the review of a simple codebase in Java

This challenge covers the review of a simple codebase in Java

This challenge covers the review of a snippet of code written in Golang.

This challenge covers the review of a CVE in a Golang codebase and its patch

This exercise covers the exploitation of polyglot token against python_jwt (CVE-2022-39227)

This challenge covers the review of a simple codebase in Python

This challenge covers the review of a simple codebase in Python

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a simple codebase in Python

This challenge covers the review of a simple codebase in Python

This challenge covers the review of a simple codebase in Python

This challenge covers the review of a simple codebase in Python

This challenge covers the review of a simple codebase in Python

This challenge covers the review of a simple codebase in Python

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This exercise is one of our challenges to help you learn Java Serialisation exploitation

This exercise covers how one can inspect HTTP responses to identify information leaks.

This exercise is one of our challenges to help you learn Java Serialisation exploitation

This exercise is one of our challenges to help you learn Java Serialisation exploitation

This exercise details how to exploit an application vulnerable to cache poisoning

This exercise details how to exploit an application vulnerable to cache deception

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This exercise details how to exploit an application vulnerable to cache deception

This challenge covers the review of a snippet of code written in Golang.

This challenge covers the review of a snippet of code written in Golang.

This challenge covers the review of a snippet of code written in Golang.

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This exercise is one of our challenges to help you learn Java Serialisation exploitation

This exercise is one of our challenges to help you learn Java Serialisation exploitation

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This exercise covers the exploitation of a SSRF in PySAML2

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This exercise covers the exploitation of algorithm confusion when no public key is available with a ECDSA key

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This exercise covers the exploitation of CVE-2021-21239 (PySAML2)

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This challenge covers the review of a CVE in a Java codebase and its patch

This exercise covers the creation of a malicious IDP to forge an assertion

This exercise covers the automation of the exploitation of a vulnerability in the DOMPDF library

This exercise covers the exploitation of a Signature Wrapping Issue in passport-saml (CVE-2022-39299)

This exercise covers the exploitation of a Java application using XSL

This exercise covers the exploitation of a vulnerability in the DOMPDF library

This exercise covers the exploitation of a PHP application using XSL

This exercise covers a way to manipulate a shopping cart to lower the total amount

This exercise covers how you can gain code execution when an application uses exiftool on user-controlled files

This exercise covers the exploitation of a PHP application using XSL

This exercise covers a simple payments bypass.

This exercise covers the exploitation of CVE-2022-39224

This exercise covers the exploitation of a PHP application using XSL

This exercise covers the exploitation of a vulnerability in the DOMPDF library

This exercise covers the exploitation of a vulnerability in the DOMPDF library

This exercise covers how to abuse a shopping cart allowing users to apply a voucher.

This exercise covers the exploitation of a PHP application using XSL

This exercise covers how to abuse a shopping cart allowing users to apply a voucher..

This exercise covers the exploitation of a PHP application using XSL

This exercise covers a simple payments bypass.

This exercise is one of our challenges to help you learn how to review real source code

This challenge covers the review of a CVE and its patch

This challenge covers the review of a CVE and its patch

This challenge covers the review of a CVE and its patch

This challenge covers the review of a snippet of code written in Python

This challenge covers the review of a snippet of code written in Java

This challenge covers the review of a snippet of code written in Java

This challenge covers the review of a snippet of code written in Java

This exercise covers a simple payments bypass.

This challenge covers the impact of nonce reuse on GCM

This challenge covers the review of a CVE and its patch

This challenge covers the review of a snippet of code written in Java

This challenge covers the review of a snippet of code written in Java

This challenge covers the review of a snippet of code written in Java

This exercise covers a simple payments bypass.

This challenge covers a vulnerable snippet in a real Java application

This challenge covers the review of a snippet of code written in Python

This challenge covers the review of a snippet of code written in Python

This challenge covers the review of a snippet of code written in Python

This challenge covers how to exploit an IDOR when Mongo IDs are used

This challenge covers the review of a CVE and its patch

This challenge covers the review of a CVE and its patch

This challenge covers the review of a snippet of code written in Golang

This challenge covers the review of a snippet of code written in Java

This challenge covers the review of a snippet of code written in Python

This exercise covers the exploitation of CVE-2022-21449 against a Java Application relying on JWT

This exercise covers how you can get arbitrary file read using CVE-2021-33564 against Refinery CMS

This challenge covers a vulnerable snippet in a real Python application

This challenge covers how to recover a Mongo ID to leverage an IDOR

This challenge covers the review of a snippet of code written in PHP

This challenge covers the review of a snippet of code written in PHP

This challenge covers the review of a snippet of code written in PHP

This challenge covers the review of a snippet of code written in Python

This challenge covers the review of a snippet of code written in Python

This challenge covers the review of a snippet of code written in Python

This challenge covers the review of a CVE and its patch

This challenge covers how to gain code execution by leveraging a JDBC connection string with PostgreSQL

This challenge covers the review of a snippet of code written in Java

This challenge covers the review of a snippet of code written in Java

This exercise covers how you can gain code execution when an application is using Ox to deserialize data and is running on Ruby 2.7

This challenge covers the review of a CVE and its patch

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers the review of a CVE and its patch

This challenge covers how to gain code execution by leveraging an H2 database in a Java application

This challenge covers the review of a snippet of code written in TypeScript

This challenge covers the review of a snippet of code written in TypeScript

This challenge covers the review of a snippet of code written in TypeScript

This challenge covers the review of a snippet of code written in TypeScript

This challenge covers the review of a snippet of code written in TypeScript

This challenge covers the review of a snippet of code written in TypeScript

This challenge covers the review of a CVE and its patch

This exercise is one of our challenges to help you learn Java Serialisation exploitation

This challenge covers the latest RCE in Log4j

This challenge covers the review of a CVE and its patch

This exercise covers how one can inspect HTTP responses to identify information leaks.

This challenge covers the review of a CVE and its patch

This exercise is one of our challenges to help you learn Java Serialisation exploitation

This challenge covers the review of a CVE and its patch

This challenge covers the review of a snippet of code written in Golang

This challenge covers the review of a snippet of code written in TypeScript

This challenge covers the review of a snippet of code written in TypeScript

This challenge covers the review of a snippet of code written in TypeScript

This exercise covers how one can inspect JavaScript code to identify information leak.

This challenge covers how to trigger a Server-Side Request Forgery by leveraging CVE-2021-40438

This challenge covers how to read arbitrary files by leveraging CVE-2021-41773

This challenge covers how to gain code execution by leveraging CVE-2021-41773

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers the review of a CVE and its patch

This challenge covers the review of a CVE and its patch

This challenge covers the review of a snippet of code written in PHP

This challenge covers the review of a snippet of code written in PHP

This challenge covers the review of a snippet of code written in PHP

This exercise covers how one can inspect JavaScript code to identify unused endpoints.

This challenge covers the review of a snippet of code written in Java

This challenge covers the review of a snippet of code written in Java

This challenge covers the review of a snippet of code written in Java

This challenge covers the review of a CVE and its patch

This challenge covers the review of a snippet of code written in PHP

This challenge covers the review of a snippet of code written in PHP

This challenge covers the review of a snippet of code written in PHP

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This exercise covers how one can inspect JavaScript code to identify unused endpoints.

This exercise covers how one can inspect JavaScript code to identify unused endpoints.

This challenge covers the review of a snippet of code written in Golang

This challenge covers the review of a snippet of code written in Golang

This challenge covers the review of a snippet of code written in Golang

This challenge covers the review of a snippet of code written in Golang

This challenge covers the review of a snippet of code written in Golang

This challenge covers the review of a snippet of code written in Golang

This challenge covers the review of a snippet of code written in Golang

This challenge covers the review of a snippet of code written in Golang

This challenge covers the review of a snippet of code written in Golang

This challenge covers the review of a snippet of code written in Golang

This challenge covers the review of a snippet of code written in JavaScript

This challenge covers the review of a snippet of code written in JavaScript

This challenge covers the review of a snippet of code written in JavaScript

This challenge covers the review of a snippet of code written in JavaScript

This challenge covers the review of a snippet of code written in JavaScript

This challenge covers the review of a snippet of code written in JavaScript

This challenge covers the review of a snippet of code written in JavaScript

This challenge covers the review of a snippet of code written in Python

This challenge covers the review of a snippet of code written in Ruby

This challenge covers the review of a snippet of code written in Ruby

This challenge covers the review of a snippet of code written in Ruby

This challenge covers the review of a snippet of code written in Ruby

This challenge covers the review of a snippet of code written in Ruby

This challenge covers the review of a snippet of code written in Ruby

This challenge covers the review of a snippet of code written in Ruby

This challenge covers the review of a snippet of code written in Ruby

This challenge covers the review of a snippet of code written in Ruby

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers the review of a CVE and its patch

This exercise covers how you can gain code execution when an application is using Ox to deserialize data and is running on Ruby 2.3

This challenge covers the review of a CVE and its patch

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers the review of a CVE and its patch

This exercise covers how you can gain code execution when an application uses exiftool on user-controlled files

This exercise covers how you can read arbitrary files when an application uses ffmpeg to render videos from a video you provide

This exercise is the API version of an exercise you already solved in another badge. You should use it to get more confident with discovering vulnerabilities without any hint on what to look for.

This challenge covers the review of a CVE and its patch

This exercise covers the exploitation of an XSS in an OAuth2 Authorization Server

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This exercise is the API version of an exercise you already solved in another badge. You should use it to get more confident with discovering vulnerabilities without any hint on what to look for.

This exercise covers how an insecure call to render can be used to gain local files read with Express

This exercise covers the exploitation of an XSS in an OAuth2 Authorization Server

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This challenge covers how to send specific HTTP requests

This exercise is the API version of an exercise you already solved in the Essential Badge. You should use it to get more confident with discovering vulnerabilities without any hint on what to look for.

This exercise covers the exploitation of algorithm confusion when no public key is available

This exercise covers the exploitation of a comment injection vulnerability in SAML

In this challenge, you need to look for a file named key.txt in the place used to serve the assets for the main website

In this challenge, you need to look for a file named key2.txt in the place used to serve the assets for the main website

In this challenge, you need to look for a key in the JavaScript used by the website

This exercise covers how you can read arbitrary files when an application uses ffmpeg to render videos from a video you provide

This exercise covers how to use Signature Wrapping to become an arbitrary user

This exercise covers a remote command execution vulnerability via argument injection

This exercise is one of our challenges to help you learn how to review real source code

This exercise is one of our challenges to help you learn how to review real source code

This exercise covers how to use Signature Wrapping to become an arbitrary user

In this challenge, you need to look at the branches in repo3

In this challenge, you need to look at the information in the branches for repo4

In this challenge, you need to look in repo9 for deleted files

In this challenge, you need to look for sensitive information in commit messages

This exercise covers how to pass the SAMLResponse from one Service Provider to another

This exercise covers the exploitation of a vulnerable CGI.

In this challenge, you need to look at the name of the developer used in the repository test1

In this challenge, you need to look at the public repository of the developers in the organisation

In this challenge, you need to look at the email addresses used for commits in the repository repo7

This exercise is one of our challenges to help you learn how to review real source code

This exercise is one of our challenges to help you learn how to review real source code

This exercise covers how you can gain code execution when an application use a vulnerable version of PyYAML and relies on load()

This exercise covers the exploitation of a state fixation in an OAuth2 Client

This exercise is one of our challenges to help you learn how to review real source code

This exercise covers a remote command execution issue on Aruba Clearpass RCE

This exercise is one of our challenges to help you learn how to review real source code

This exercise covers the exploitation of a predictable state in an OAuth2 Client

In this challenge, you need to find the TXT record linked to key.z.hackycorp.com

In this challenge, you need to find a TXT record by doing a zone transfer on z.hackycorp.com

In this challenge, you need to find a TXT record by doing a zone transfer on the internal zone "int"

In this challenge, you need to find the version of Bind used

This exercise covers the exploitation of a vulnerability impacting Monocypher.

This exercise is one of our challenges to help you learn how to review real source code

This exercise covers the exploitation of a predictable state in an OAuth2 Client

This exercise is one of our challenges to help you learn how to review real source code

This exercise covers how to leverage unicode to exploit a directory traversal

This exercise covers the exploitation of a Service Provider (SP) that doesn't check the certificate provided in the SAMLResponse

This exercise covers default vhost

This exercise covers default TLS vhost

This exercise covers aliases in TLS certificates

This exercise details the exploitation of CVE-2020-8163 to gain code execution

This exercise covers the exploitation of a known key in SAML

This exercise is one of our challenges to help you learn how to review real source code

This exercise covers common interesting directories

This exercise covers simple directory bruteforcing

This exercise covers 404 error pages

This exercise covers the exploitation of a Cross-Site Scripting in an OAuth2 Client and Server

This exercise covers how you can create a malicious Zip file and use it to gain access to sensitive files.

This exercise is one of our challenges to help you learn how to review real source code

This exercise covers the exploitation of a comment injection vulnerability in SAML

This exercise covers how you can use unicode to gain access to an admin account.

This exercise is one of our challenges to help you learn how to review real source code

This exercise covers visual content discovery

This exercise covers the robots.txt file

This exercise covers the security.txt file

This exercise covers directory listing

This exercise is one of our challenges to help you learn Java Serialisation exploitation

This exercise covers how you can use unicode to gain access to an admin account.

This exercise is one of our challenges to help you learn how to review real source code

This exercise covers how to use Cross-Site Leak to recover sensitive information

This exercise covers how to gain access to an administration interface using a SQL injection, and how to get command execution using Ghostscript

This exercise covers the exploitation of a CSRF in an OAuth2 Client

This exercise covers how to use Cross-Site-Scripting Include to leak information

This exercise covers the exploitation of a CSRF in an OAuth2 Client

This exercise is one of our challenges to help you learn how to review real source code

This exercise is one of our challenges to help you learn how to review real source code

This exercise covers how to exploit Prototype Pollution against a JavaScript application

This exercise covers the exploitation of a CSRF in an OAuth2 Authorization Server

This exercise is one of our challenges to help you learn how to review real source code

This exercise covers how you can read arbitrary files when an application generates pdfs from provided links

This exercise covers the exploitation of the HTTP HEAD issue impacting Github in 2019

This exercise covers how to use an SVG to trigger a Cross-Site-Scripting

This exercise covers how to gain code execution on Apache Pluto 3.0.0 due to a flaw in the authorization logic

This exercise details the exploitation of a Cross-Site Request Forgery when JSON is used

This exercise details the exploitation of a Cross-Site Request Forgery to gain access to sensitive data

This exercise is one of our challenges to help you learn how to review real source code

This exercise covers how insecure calls to the JavaScript function postMessage() can be used to leak sensitive information when a listener does not filter the Origin and X-Frame-Options is used

This exercise is one of our challenges to help you learn how to review real source code

This exercise covers how you can gain code execution using Spring Actuators when Spring Cloud is used.

This exercise covers how insecure calls to the JavaScript function postMessage() can be used to trigger a Cross-Site Scripting

This exercise covers how insecure calls to the JavaScript function postMessage() can be used to leak sensitive information when a listener does not filter the Origin

This exercise covers how the PHP phar:// handler can be used to gain code execution using PHP unserialize.

This exercise covers how a signing oracle can be used to bypass authorization in place

This exercise covers how to use a length extension attack to exploit a directory traversal vulnerability

This exercise covers how you can create your own JWE if you have access to the public key used by the server

This exercise covers how insecure calls to the JavaScript function postMessage() can be used to leak sensitive information

This exercise details the exploitation of CVE-2019-5418 to get code execution

This exercise covers Cross-Site WebSocket Hijacking and how it can be used to gain access to sensitive information

This exercise covers how to use the x5u header to bypass an authentication based on JWT.

This exercise covers Cross-Origin Resource Sharing and how it can be used to get access to sensitive data.

This exercise covers how to use the jku header to bypass an authentication based on JWT.

This exercise details the exploitation of CVE-2019-5420 to gain code execution

This exercise covers the exploitation of an OpenRedirect in an OAuth2 Client

This exercise details the exploitation of CVE-2019-5420 to forge a session as another user

This exercise covers how to use the jku header to bypass an authentication based on JWT.

This exercise covers how to use introspection and a SQL injection to get access to additional information in GraphQL.

This exercise covers the exploitation of an OpenRedirect in an OAuth2 Authorization Server

This exercise covers how to use the jku header to bypass an authentication based on JWT.

This exercise covers how to get code execution against the Git self hosted tool: Gogs.

This exercise covers how to use the jku header to bypass an authentication based on JWT.

This exercise covers the exploitation of a signature stripping vulnerability in SAML

This exercise covers how to use introspection to get access to additional information in GraphQL.

This exercise covers how to get code execution against the Git self hosted tool: Gogs.

This exercise will guide you through the process of reversing a simple obfuscated Android code to recover the encrypted data

This exercise will guide you through the process of reversing a simple obfuscated Android code to recover the encrypted data

This exercise will guide you through the process of reversing a simple obfuscated Android code to recover the encrypted data

This exercise will guide you through the process of reversing a simple obfuscated Android code to recover the encrypted data

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise covers how to get code execution by using a Ruby Universal Gadget when an attacker controls the data passed to Marshal.load()

This exercise covers how to bypass authentication on an SSH server based on libssh to gain a shell on the affected system

This exercise will guide you through the process of reversing a simple Android code

This exercise will guide you through the process of extracting simple information from an APK

This exercise covers how to gain access to an administration interface using SQL injection followed by how to get command execution using ImageTragick

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise will guide you through the process of extracting data from a simple database used by an Android app

This exercise covers how to get code execution by chaining vulnerabilities in a Ruby-on-Rails application

This exercise will guide you through the process of extracting simple information from an APK

This exercise details the exploitation of a XSS in a simple web application that uses Content Security Policy

This exercise details the exploitation of a vulnerability in Git Sub module that can be used to get command execution

This exercise details how to retrieve information from an exposed .git directory on a web server, provided directory listing is disabled

This exercise details how to retrieve information from an exposed .git directory on a web server

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise is one of our challenges to help you learn how to analyze PCAP files

This exercise covers the exploitation of a website using JWT for session without verifying the signature

This exercise covers the exploitation of HTTPoxy against an old version of Golang

This exercise is one of our challenges to help you learn more about Unix/Linux

This exercise is one of our challenges to help you learn more about Unix/Linux

This exercise is one of our challenges to help you learn more about Unix/Linux

This exercise is one of our challenges to help you learn more about Unix/Linux

This exercise is one of our challenges to help you learn more about Unix/Linux

This exercise is one of our challenges to help you learn more about Unix/Linux

This exercise is one of our challenges to help you learn more about Unix/Linux

This exercise is one of our challenges to help you learn more about Unix/Linux

This exercise is one of our challenges to help you learn more about Unix/Linux

This exercise is one of our challenges to help you learn more about Unix/Linux

This exercise covers the exploitation of an application using CBC-MAC when an attacker has control over the IV

This exercise covers the exploitation of an injection in the kid element of a JWT. This injection can be used to bypass the signature mechanism

This exercise covers a remote command execution in Golang's go get command.