Penetration Testing, Security Code Review and Web App Security Exercises

Free PRO CVE Easy Medium Hard XSS Code Review API SSRF HTTP RECON CSRF SQLi

Exercise	Avg. Time	Solved by	Tier
Python Snippet #04 This challenge covers the review of a snippet of code written in Python	< 1 Hr.	1720	PRO
Python Snippet #05 This challenge covers the review of a snippet of code written in Python	< 1 Hr.	1901	PRO
CVE-2021-39x3x This challenge covers the review of a CVE and its patch	< 1 Hr.	649	PRO
Java Snippet #05 This challenge covers the review of a snippet of code written in Java	< 1 Hr.	1520	PRO
Java Snippet #04 This challenge covers the review of a snippet of code written in Java	< 1 Hr.	1659	PRO
CVE-2009-3x8x This challenge covers the review of a CVE and its patch	< 1 Hr.	803	PRO
H2 RCE This challenge covers how to gain code execution by leveraging an H2 database in a Java application	< 1 Hr.	138	PRO
TypeScript Snippet #08 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1174	PRO
TypeScript Snippet #06 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1164	PRO
TypeScript Snippet #04 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1273	PRO
TypeScript Snippet #07 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1106	PRO
CVE-2008-4x9x This challenge covers the review of a CVE and its patch	< 1 Hr.	753	PRO
Log4j RCE II This exercise is one of our challenges to help you learn Java Serialisation exploitation	1-2 Hr.	181	PRO
Log4j RCE This challenge covers the latest RCE in Log4j	1-2 Hr.	307	PRO
CVE-2021-4379x This challenge covers the review of a CVE and its patch	< 1 Hr.	753	PRO
CVE-2008-1x3x This challenge covers the review of a CVE and its patch	< 1 Hr.	1022	PRO
TypeScript Snippet #02 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1463	PRO
TypeScript Snippet #01 This challenge covers the review of a snippet of code written in TypeScript	< 1 Hr.	1509	PRO
CVE-2021-41773 This challenge covers how to read arbitrary files by leveraging CVE-2021-41773	< 1 Hr.	571	PRO
HTTP 39 This challenge covers how to send specific HTTP requests	< 1 Hr.	2921	PRO
CVE-2006-4xxx_ii This challenge covers the review of a CVE and its patch	< 1 Hr.	674	PRO
CVE-2006-4xxx This challenge covers the review of a CVE and its patch	< 1 Hr.	788	PRO
PHP Snippet #06 This challenge covers the review of a snippet of code written in PHP	< 1 Hr.	1872	PRO
API 06 API Angular This exercise covers how one can inspect JavaScript code to identify unused endpoints.	< 1 Hr.	2030	PRO
Java Snippet #03 This challenge covers the review of a snippet of code written in Java	< 1 Hr.	1683	PRO
Java Snippet #01 This challenge covers the review of a snippet of code written in Java	< 1 Hr.	1891	PRO
CVE-2021-37xxx This challenge covers the review of a CVE and its patch	< 1 Hr.	751	PRO
PHP Snippet #01 This challenge covers the review of a snippet of code written in PHP	< 1 Hr.	2542	PRO
PHP Snippet #03 This challenge covers the review of a snippet of code written in PHP	< 1 Hr.	1995	PRO
HTTP 35 This challenge covers how to send specific HTTP requests	< 1 Hr.	2990	PRO

‹ 1 2 3 4 5 6 … 9 ›

Showing 61–90 of 270 exercises