Penetration Testing, Security Code Review and Web App Security Exercises

Free PRO CVE Easy Medium Hard XSS Code Review API SSRF HTTP RECON CSRF SQLi

Exercise	Avg. Time	Solved by	Tier
OAuth2: Client CSRF II This exercise covers the exploitation of a CSRF in an OAuth2 Client	2-4 Hr.	497	PRO
OAuth2: Client CSRF This exercise covers the exploitation of a CSRF in an OAuth2 Client	< 1 Hr.	971	PRO
OAuth2: Authorization Server CSRF This exercise covers the exploitation of a CSRF in an OAuth2 Authorization Server	1-2 Hr.	1166	PRO
JSON Cross-Site Request Forgery This exercise details the exploitation of a Cross-Site Request Forgery when JSON is used	< 1 Hr.	1505	PRO
Cross-Site Request Forgery This exercise details the exploitation of a Cross-Site Request Forgery to gain access to sensitive data	< 1 Hr.	1558	PRO

Showing 1–5 of 5 exercises