Penetration Testing, Security Code Review and Web App Security Exercises

Free PRO CVE Easy Medium Hard XSS Code Review API SSRF HTTP RECON CSRF SQLi

Exercise	Avg. Time	Solved by	Tier
Unickle This challenge was written for Ruxcon CTF 2015. It's an SQL injection mixed with a remote code execution.	1-2 Hr.	688	PRO
Luhn This challenge was written for Ruxcon CTF 2015. It's an SQL injection with a twist	2-4 Hr.	635	PRO
CVE-2014-1266 This exercise covers how to intercept an HTTPs connection	1-2 Hr.	1081	PRO
CVE-2011-0228 This exercise covers how to intercept an HTTPs connection	1-2 Hr.	1235	PRO
API to Shell API This exercise covers the exploitation of PHP type confusion to bypass a signature and the exploitation of unserialize.	2-4 Hr.	3553	PRO

‹ 1 2 ›

Showing 31–35 of 35 exercises