Penetration Testing, Security Code Review and Web App Security Exercises

Free PRO CVE Easy Medium Hard XSS Code Review API SSRF HTTP RECON CSRF SQLi

Exercise	Avg. Time	Solved by	Tier
Python Snippet #04 This challenge covers the review of a snippet of code written in Python	< 1 Hr.	1772	PRO
Python Snippet #05 This challenge covers the review of a snippet of code written in Python	< 1 Hr.	1960	PRO
CVE-2021-39x3x This challenge covers the review of a CVE and its patch	< 1 Hr.	675	PRO
Java Snippet #05 This challenge covers the review of a snippet of code written in Java	< 1 Hr.	1549	PRO
Java Snippet #04 This challenge covers the review of a snippet of code written in Java	< 1 Hr.	1704	PRO
CVE-2009-3x8x This challenge covers the review of a CVE and its patch	< 1 Hr.	828	PRO
H2 RCE This challenge covers how to gain code execution by leveraging an H2 database in a Java application	< 1 Hr.	145	PRO
TypeScript Snippet #08 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1203	PRO
TypeScript Snippet #06 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1193	PRO
TypeScript Snippet #04 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1304	PRO
TypeScript Snippet #07 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1134	PRO
CVE-2008-4x9x This challenge covers the review of a CVE and its patch	< 1 Hr.	778	PRO
Log4j RCE II This exercise is one of our challenges to help you learn Java Serialisation exploitation	1-2 Hr.	188	PRO
Log4j RCE This challenge covers the latest RCE in Log4j	1-2 Hr.	312	PRO
CVE-2021-4379x This challenge covers the review of a CVE and its patch	< 1 Hr.	775	PRO
CVE-2008-1x3x This challenge covers the review of a CVE and its patch	< 1 Hr.	1043	PRO
TypeScript Snippet #02 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1507	PRO
TypeScript Snippet #01 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1545	PRO
CVE-2021-41773 This challenge covers how to read arbitrary files by leveraging CVE-2021-41773	< 1 Hr.	578	PRO
HTTP 39 This challenge covers how to send specific HTTP requests	< 1 Hr.	2958	PRO
CVE-2006-4xxx_ii This challenge covers the review of a CVE and its patch	< 1 Hr.	694	PRO
CVE-2006-4xxx This challenge covers the review of a CVE and its patch	< 1 Hr.	808	PRO
PHP Snippet #06 This challenge covers the review of a snippet of code written in PHP	< 1 Hr.	1902	PRO
API 06 API Angular This exercise covers how one can inspect JavaScript code to identify unused endpoints.	< 1 Hr.	2074	PRO
Java Snippet #03 This challenge covers the review of a snippet of code written in Java	< 1 Hr.	1712	PRO
Java Snippet #01 This challenge covers the review of a snippet of code written in Java	< 1 Hr.	1918	PRO
CVE-2021-37xxx This challenge covers the review of a CVE and its patch	< 1 Hr.	796	PRO
PHP Snippet #01 This challenge covers the review of a snippet of code written in PHP	< 1 Hr.	2577	PRO
PHP Snippet #03 This challenge covers the review of a snippet of code written in PHP	< 1 Hr.	2025	PRO
HTTP 35 This challenge covers how to send specific HTTP requests	< 1 Hr.	3028	PRO

‹ 1 2 3 4 5 6 … 9 ›

Showing 61–90 of 270 exercises