Penetration Testing, Security Code Review and Web App Security Exercises

Free PRO CVE Easy Medium Hard XSS Code Review API SSRF HTTP RECON CSRF SQLi

Exercise	Avg. Time	Solved by	Tier
Unickle This challenge was written for Ruxcon CTF 2015. It's an SQL injection mixed with a remote code execution.	< 1 Hr.	691	PRO
Luhn This challenge was written for Ruxcon CTF 2015. It's an SQL injection with a twist	< 1 Hr.	639	PRO
CVE-2014-1266 This exercise covers how to intercept an HTTPs connection	< 1 Hr.	1082	PRO
CVE-2011-0228 This exercise covers how to intercept an HTTPs connection	< 1 Hr.	1236	PRO
API to Shell API This exercise covers the exploitation of PHP type confusion to bypass a signature and the exploitation of unserialize.	< 1 Hr.	3560	PRO

‹ 1 2 ›

Showing 31–35 of 35 exercises