PentesterLab will help you
Category:
CVE-2018-10933: LibSSH auth bypass
Introduction to code review
S2-052
Blue Badge
CVE-2014-4511: Gitlist RCE
Padding Oracle
Capture-The-Flag Badge
Play XML Entities
Yellow Badge
CVE-2014-6271/Shellshock
White Badge
Play Session Injection
Yellow Badge
CVE-2007-1860: mod_jk double-decoding
White Badge
XSS and MySQL FILE
Orange Badge
Electronic Code Book
White Badge
Web for Pentester II
From SQL Injection to Shell II
CVE-2012-6081: MoinMoin code execution
Web for Pentester
Axis2 Web service and Tomcat Manager
CVE-2008-1930: Wordpress 2.5 Cookie Integrity Protection Vulnerability
From SQL Injection to Shell: PostgreSQL edition
Rack Cookies and Commands injection
Linux Host Review
CVE-2012-2661: ActiveRecord SQL injection
CVE-2012-1823: PHP CGI
PHP Include And Post Exploitation
