Penetration Testing, Security Code Review and Web App Security Exercises

Free PRO CVE Easy Medium Hard XSS Code Review API SSRF HTTP RECON CSRF SQLi

Exercise	Avg. Time	Solved by	Tier
Golang Snippet #01 This challenge covers the review of a snippet of code written in Golang	< 1 Hr.	1910	PRO
Python Snippet #06 This challenge covers the review of a snippet of code written in Python	< 1 Hr.	1933	PRO
CVE-2021-45xx9 This challenge covers a vulnerable snippet in a real Python application	< 1 Hr.	841	PRO
PHP Snippet #07 This challenge covers the review of a snippet of code written in PHP	< 1 Hr.	1857	PRO
Python Snippet #03 This challenge covers the review of a snippet of code written in Python	< 1 Hr.	1996	PRO
Python Snippet #05 This challenge covers the review of a snippet of code written in Python	< 1 Hr.	2043	PRO
Python Snippet #04 This challenge covers the review of a snippet of code written in Python	< 1 Hr.	1841	PRO
CVE-2021-39x3x This challenge covers the review of a CVE and its patch	< 1 Hr.	709	PRO
Java Snippet #04 This challenge covers the review of a snippet of code written in Java	< 1 Hr.	1769	PRO
Java Snippet #05 This challenge covers the review of a snippet of code written in Java	< 1 Hr.	1596	PRO
CVE-2009-3x8x This challenge covers the review of a CVE and its patch	< 1 Hr.	862	PRO
H2 RCE This challenge covers how to gain code execution by leveraging an H2 database in a Java application	< 1 Hr.	163	PRO
TypeScript Snippet #04 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1352	PRO
TypeScript Snippet #08 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1249	PRO
TypeScript Snippet #06 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1239	PRO
TypeScript Snippet #07 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1183	PRO
CVE-2008-4x9x This challenge covers the review of a CVE and its patch	< 1 Hr.	817	PRO
Log4j RCE II This exercise is one of our challenges to help you learn Java Serialisation exploitation	1-2 Hr.	209	PRO
Log4j RCE This challenge covers the latest RCE in Log4j	< 1 Hr.	332	PRO
CVE-2021-4379x This challenge covers the review of a CVE and its patch	< 1 Hr.	808	PRO
CVE-2008-1x3x This challenge covers the review of a CVE and its patch	< 1 Hr.	1086	PRO
TypeScript Snippet #02 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1565	PRO
TypeScript Snippet #01 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1600	PRO
CVE-2021-41773 This challenge covers how to read arbitrary files by leveraging CVE-2021-41773	< 1 Hr.	592	PRO
HTTP 39 This challenge covers how to send specific HTTP requests	< 1 Hr.	3003	PRO
CVE-2006-4xxx This challenge covers the review of a CVE and its patch	< 1 Hr.	839	PRO
CVE-2006-4xxx_ii This challenge covers the review of a CVE and its patch	< 1 Hr.	721	PRO
PHP Snippet #06 This challenge covers the review of a snippet of code written in PHP	< 1 Hr.	1966	PRO
API 06 API Angular This exercise covers how one can inspect JavaScript code to identify unused endpoints.	< 1 Hr.	2137	PRO
Java Snippet #01 This challenge covers the review of a snippet of code written in Java	< 1 Hr.	1969	PRO

‹ 1 2 3 4 5 6 … 10 ›

Showing 61–90 of 275 exercises