Penetration Testing, Security Code Review and Web App Security Exercises

Free PRO CVE Easy Medium Hard XSS Code Review API SSRF HTTP RECON CSRF SQLi

Exercise	Avg. Time	Solved by	Tier
Unickle This challenge was written for Ruxcon CTF 2015. It's an SQL injection mixed with a remote code execution.	< 1 Hr.	694	PRO
Luhn This challenge was written for Ruxcon CTF 2015. It's an SQL injection with a twist	< 1 Hr.	641	PRO
CVE-2014-1266 This exercise covers how to intercept an HTTPs connection	< 1 Hr.	1083	PRO
CVE-2011-0228 This exercise covers how to intercept an HTTPs connection	< 1 Hr.	1237	PRO
API to Shell API This exercise covers the exploitation of PHP type confusion to bypass a signature and the exploitation of unserialize.	< 1 Hr.	3567	PRO

‹ 1 2 ›

Showing 31–35 of 35 exercises