Penetration Testing, Security Code Review and Web App Security Exercises

Free PRO CVE Easy Medium Hard XSS Code Review API SSRF HTTP RECON CSRF SQLi

Exercise	Avg. Time	Solved by	Tier
OAuth2: Client CSRF II This exercise covers the exploitation of a CSRF in an OAuth2 Client	2-4 Hr.	494	PRO
OAuth2: Client CSRF This exercise covers the exploitation of a CSRF in an OAuth2 Client	< 1 Hr.	966	PRO
JSON Cross-Site Request Forgery This exercise details the exploitation of a Cross-Site Request Forgery when JSON is used	< 1 Hr.	1491	PRO
Cross-Site Request Forgery This exercise details the exploitation of a Cross-Site Request Forgery to gain access to sensitive data	< 1 Hr.	1551	PRO

Showing 1–4 of 4 exercises