Exercises

This exercise covers the exploitation of a signature stripping vulnerability in SAML

This exercise is one of our challenges on Server-Side Request Forgery

This exercise is one of our challenges on Server-Side Request Forgery

This exercise is one of our challenges on Server-Side Request Forgery

This exercise is one of our challenges on Directory Traversal

This exercise is one of our challenges on Directory Traversal

This exercise is one of our challenges on Directory Traversal

This exercise is one of our challenges on Cross-Site Scripting

This exercise is one of our challenges on Cross-Site Scripting

This exercise is one of our challenges on Upload vulnerabilities

This exercise is one of our challenges on Upload vulnerabilities

This exercise is one of our challenges on Cross-Site Scripting

This exercise is one of our challenges on File Include vulnerabilities

This exercise is one of our challenges on vulnerabilities related to LDAP

This exercise is one of our challenges on Authentication issues

This exercise is one of our challenges on Authentication issues

This exercise is one of our challenges on Authentication issues

This exercise is one of our challenges on Authentication issues

This exercise is one of our challenges on Authorisation issues

This exercise is one of our challenges on Authorisation issues

This exercise is one of our challenges on Code Execution

This exercise will guide you through the process of scoring on an exercise to get it marked as completed

This exercise will guide through the process of scoring an exercise to mark it as completed

This exercise will guide through the process of scoring an exercise to mark it as completed. Finding the key is just a little bit harder than the previous exercise.

This exercise will guide through the process of scoring an exercise to mark it as completed. However, this time, you will run commands on the underlying operating system. You will need to run the score command with your UUID.

This exercise covers how to intercept an HTTP connection.

This exercise covers the exploitation of a signature weakness in a JWT library.

This exercise covers the exploitation of a Bash vulnerability through a CGI.

This exercise is a set of the most common web vulnerabilities.

This exercise is a set of the most common web vulnerabilities.