Penetration Testing, Security Code Review and Web App Security Exercises

Free PRO CVE Easy Medium Hard XSS Code Review API SSRF HTTP RECON CSRF SQLi

Exercise	Avg. Time	Solved by	Tier
Python Snippet #04 This challenge covers the review of a snippet of code written in Python	< 1 Hr.	1684	PRO
Python Snippet #05 This challenge covers the review of a snippet of code written in Python	< 1 Hr.	1858	PRO
CVE-2021-39x3x This challenge covers the review of a CVE and its patch	< 1 Hr.	632	PRO
Java Snippet #05 This challenge covers the review of a snippet of code written in Java	< 1 Hr.	1486	PRO
Java Snippet #04 This challenge covers the review of a snippet of code written in Java	< 1 Hr.	1618	PRO
CVE-2009-3x8x This challenge covers the review of a CVE and its patch	< 1 Hr.	790	PRO
H2 RCE This challenge covers how to gain code execution by leveraging an H2 database in a Java application	< 1 Hr.	130	PRO
TypeScript Snippet #08 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1146	PRO
TypeScript Snippet #06 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1133	PRO
TypeScript Snippet #04 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1241	PRO
TypeScript Snippet #07 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1078	PRO
CVE-2008-4x9x This challenge covers the review of a CVE and its patch	< 1 Hr.	739	PRO
Log4j RCE II This exercise is one of our challenges to help you learn Java Serialisation exploitation	1-2 Hr.	173	PRO
Log4j RCE This challenge covers the latest RCE in Log4j	1-2 Hr.	296	PRO
CVE-2021-4379x This challenge covers the review of a CVE and its patch	< 1 Hr.	738	PRO
CVE-2008-1x3x This challenge covers the review of a CVE and its patch	< 1 Hr.	996	PRO
TypeScript Snippet #02 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1421	PRO
TypeScript Snippet #01 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1472	PRO
CVE-2021-41773 This challenge covers how to read arbitrary files by leveraging CVE-2021-41773	< 1 Hr.	566	PRO
HTTP 39 This challenge covers how to send specific HTTP requests	< 1 Hr.	2814	PRO
CVE-2006-4xxx_ii This challenge covers the review of a CVE and its patch	< 1 Hr.	659	PRO
CVE-2006-4xxx This challenge covers the review of a CVE and its patch	< 1 Hr.	774	PRO
PHP Snippet #06 This challenge covers the review of a snippet of code written in PHP	< 1 Hr.	1840	PRO
API 06 API Angular This exercise covers how one can inspect JavaScript code to identify unused endpoints.	< 1 Hr.	1980	PRO
Java Snippet #03 This challenge covers the review of a snippet of code written in Java	< 1 Hr.	1647	PRO
Java Snippet #01 This challenge covers the review of a snippet of code written in Java	< 1 Hr.	1858	PRO
CVE-2021-37xxx This challenge covers the review of a CVE and its patch	< 1 Hr.	729	PRO
PHP Snippet #01 This challenge covers the review of a snippet of code written in PHP	< 1 Hr.	2503	PRO
PHP Snippet #03 This challenge covers the review of a snippet of code written in PHP	< 1 Hr.	1958	PRO
HTTP 35 This challenge covers how to send specific HTTP requests	< 1 Hr.	2950	PRO

‹ 1 2 3 4 5 6 … 9 ›

Showing 61–90 of 270 exercises