Exercises

Exercise Avg. Time Difficulty Solved by Tier
JWT: Signature Leak
This exercise covers exploiting a JWT signature leak to forge authentication tokens.
-- easy 0 PRO
JWT: Invalid Algorithm
This exercise covers exploiting JWT algorithm validation flaws to bypass signature verification.
< 1 Hr. easy 11 PRO
API JWT REVOCATION JWT
This exercise covers how to bypass a weak JWT Revocation Mechanism.
< 1 Hr. easy 413 PRO
GraphQL Authorization 01
This exercise covers a simple authorization issue in a GraphQL application.
< 1 Hr. easy 375 PRO
GraphQL Authorization 02
This exercise covers a simple authorization issue in a GraphQL application.
< 1 Hr. easy 386 PRO
Golang Code Review #03
This challenge covers the review of a snippet of code written in Golang.
< 1 Hr. easy 133 PRO
Golang Code Review #01
This challenge covers the review of a snippet of code written in Golang.
< 1 Hr. easy 173 PRO
CVE-2023-X48X9
This challenge covers the review of a CVE in a Java codebase and its patch
< 1 Hr. easy 159 PRO
CVE-2023-46XX2
This challenge covers the review of a CVE in a Java codebase and its patch
< 1 Hr. easy 152 PRO
CVE-2022-4x13x
This challenge covers the review of a CVE in a Java codebase and its patch
< 1 Hr. easy 133 PRO
GHSA-95XX
This challenge covers the review of a CVE in a Java codebase and its patch
< 1 Hr. easy 124 PRO
CVE-2023-289X6
This challenge covers the review of a CVE in a Java codebase and its patch
< 1 Hr. easy 124 PRO
CVE-2023-350XX
This challenge covers the review of a CVE in a Java codebase and its patch
< 1 Hr. easy 148 PRO
CVE-2023-XXX83
This challenge covers the review of a CVE in a Java codebase and its patch
< 1 Hr. easy 155 PRO
CVE-2022-342XX
This challenge covers the review of a CVE in a Java codebase and its patch
< 1 Hr. easy 130 PRO
Golang Code Review #02
This challenge covers the review of a snippet of code written in Golang.
< 1 Hr. easy 146 PRO
Golang Code Review #09
This challenge covers the review of a snippet of code written in Golang.
< 1 Hr. easy 117 PRO
Golang Code Review #05
This challenge covers the review of a snippet of code written in Golang.
< 1 Hr. easy 125 PRO
CVE-2022-X50X6
This challenge covers the review of a CVE in a Java codebase and its patch
< 1 Hr. easy 136 PRO
CVE-202X-2561X
This challenge covers the review of a CVE in a Java codebase and its patch
< 1 Hr. easy 142 PRO
CVE-2023-25X4X
This challenge covers the review of a CVE in a Java codebase and its patch
< 1 Hr. easy 127 PRO
CVE-2022-X51X3
This challenge covers the review of a CVE in a Java codebase and its patch
< 1 Hr. easy 194 PRO
CVE-2022-x0x08
This challenge covers the review of a CVE in a Java codebase and its patch
< 1 Hr. easy 159 PRO
CVE-2022-4504x
This challenge covers the review of a CVE in a Java codebase and its patch
< 1 Hr. easy 198 PRO
CVE-2007-546X
This challenge covers the review of a CVE in a Java codebase and its patch
< 1 Hr. easy 156 PRO
CVE-2006-6X6X
This challenge covers the review of a CVE in a Java codebase and its patch
< 1 Hr. easy 160 PRO
CVE-2011-XX61
This challenge covers the review of a CVE in a Java codebase and its patch
< 1 Hr. easy 148 PRO
CVE-2020-9X8X
This challenge covers the review of a CVE in a Java codebase and its patch
< 1 Hr. easy 260 PRO
CVE-2018-XX34
This challenge covers the review of a CVE in a Java codebase and its patch
< 1 Hr. easy 201 PRO
CVE-2014-7X09
This challenge covers the review of a CVE in a Java codebase and its patch
1-2 Hr. easy 214 PRO
1 2 3 4 9
Showing 1–30 of 266 exercises