Penetration Testing, Security Code Review and Web App Security Exercises

Free PRO CVE Easy Medium Hard XSS Code Review API SSRF HTTP RECON CSRF SQLi

Exercise	Avg. Time	Solved by	Tier
OAuth2: Client CSRF II This exercise covers the exploitation of a CSRF in an OAuth2 Client	2-4 Hr.	501	PRO
OAuth2: Client CSRF This exercise covers the exploitation of a CSRF in an OAuth2 Client	< 1 Hr.	979	PRO
OAuth2: Authorization Server CSRF This exercise covers the exploitation of a CSRF in an OAuth2 Authorization Server	1-2 Hr.	1174	PRO
JSON Cross-Site Request Forgery This exercise details the exploitation of a Cross-Site Request Forgery when JSON is used	< 1 Hr.	1516	PRO
Cross-Site Request Forgery This exercise details the exploitation of a Cross-Site Request Forgery to gain access to sensitive data	< 1 Hr.	1564	PRO

Showing 1–5 of 5 exercises