Penetration Testing, Security Code Review and Web App Security Exercises

Free PRO CVE Easy Medium Hard XSS Code Review API SSRF HTTP RECON CSRF SQLi

Exercise	Avg. Time	Solved by	Tier
Recon 25 In this challenge, you need to look for a file named key2.txt in the place used to serve the assets for the main website	< 1 Hr.	3424	FREE
Recon 23 In this challenge, you need to look for sensitive information in commit messages	< 1 Hr.	5332	FREE
Recon 21 In this challenge, you need to look at the information in the branches for repo4	< 1 Hr.	5564	FREE
Recon 20 In this challenge, you need to look at the branches in repo3	< 1 Hr.	5693	FREE
Recon 15 In this challenge, you need to find a TXT record by doing a zone transfer on the internal zone "int"	< 1 Hr.	5775	FREE
Recon 14 In this challenge, you need to find a TXT record by doing a zone transfer on z.hackycorp.com	< 1 Hr.	6345	FREE
Recon 13 In this challenge, you need to find the TXT record linked to key.z.hackycorp.com	< 1 Hr.	7057	FREE
Recon 12	< 1 Hr.	7035	FREE
Recon 11	< 1 Hr.	6481	FREE
Recon 09	< 1 Hr.	11058	FREE
Recon 07 This exercise covers default TLS vhost	< 1 Hr.	11457	FREE
Recon 06 This exercise covers default vhost	< 1 Hr.	12589	FREE
Recon 03 This exercise covers directory listing	< 1 Hr.	17627	FREE
Recon 02 This exercise covers the security.txt file	< 1 Hr.	19706	FREE
Recon 00 This exercise covers the robots.txt file	< 1 Hr.	23353	FREE
Introduction to code review This exercise covers the different ways to perform code review. It also contains a simple application to review to help you get started.		0	FREE
S2-052 This exercise covers the exploitation of the Struts S2-052 vulnerability	< 1 Hr.	2623	FREE
CVE-2014-6271/Shellshock This exercise covers the exploitation of a Bash vulnerability through a CGI.	< 1 Hr.	9167	FREE
Web for Pentester II This exercise is a set of the most common web vulnerabilities.		0	FREE
Web for Pentester This exercise is a set of the most common web vulnerabilities.		0	FREE

Showing 1–20 of 20 exercises