Sign in Create Account

Exercises

Exercise Avg. Time Difficulty Solved by Tier
SAML: CVE-2021-21239
This exercise covers the exploitation of CVE-2021-21239 (PySAML2)
 < 1 Hr. medium 163 PRO
SAML: Signature Wrapping III
This exercise covers the exploitation of a Signature Wrapping Issue in passport-saml (CVE-2022-39299)
 < 1 Hr. medium 220 PRO
XSL Java
This exercise covers the exploitation of a Java application using XSL
< 1 Hr. medium 147 PRO
DOMPDF RCE III
This exercise covers the exploitation of a vulnerability in the DOMPDF library
 < 1 Hr. medium 74 PRO
API Payments 07
This exercise covers a way to manipulate a shopping cart to lower the total amount
 < 1 Hr. medium 1050 PRO
CVE-2021-22204: Exiftool RCE II
This exercise covers how you can gain code execution when an application uses exiftool on user-controlled files
 < 1 Hr. medium 97 PRO
XSL PHP IV
This exercise covers the exploitation of a PHP application using XSL
< 1 Hr. medium 174 PRO
API Payments 06
This exercise covers a simple payments bypass.
 < 1 Hr. medium 1083 PRO
CVE-2022-39224
This exercise covers the exploitation of CVE-2022-39224
 < 1 Hr. medium 121 PRO
XSL PHP III
This exercise covers the exploitation of a PHP application using XSL
< 1 Hr. medium 194 PRO
DOMPDF RCE II
This exercise covers the exploitation of a vulnerability in the DOMPDF library
 < 1 Hr. medium 90 PRO
DOMPDF RCE
This exercise covers the exploitation of a vulnerability in the DOMPDF library
 < 1 Hr. medium 177 PRO
XSL PHP II
This exercise covers the exploitation of a PHP application using XSL
< 1 Hr. medium 262 PRO
API Payments 04
This exercise covers how to abuse a shopping cart allowing users to apply a voucher..
 < 1 Hr. medium 1305 PRO
XSL PHP
This exercise covers the exploitation of a PHP application using XSL
< 1 Hr. medium 307 PRO
API Payments 03
This exercise covers a simple payments bypass.
 < 1 Hr. medium 1420 PRO
CVE-2020-13xxx
This challenge covers the review of a CVE and its patch
 < 1 Hr. medium 736 PRO
Code Review 18
This exercise is one of our challenges to help you learn how to review real source code
 < 1 Hr. medium 440 PRO
API Payments 02
This exercise covers a simple payments bypass.
 < 1 Hr. medium 1591 PRO
GCM Nonce Reuse
This challenge covers the impact of nonce reuse on GCM
 < 1 Hr. medium 205 PRO
CVE-2019-5x2x
This challenge covers the review of a CVE and its patch
 < 1 Hr. medium 669 PRO
Java Snippet #09
This challenge covers the review of a snippet of code written in Java
 < 1 Hr. medium 1462 PRO
CVE-2022-26xx9
This challenge covers a vulnerable snippet in a real Java application
 < 1 Hr. medium 685 PRO
Mongo IDOR
This challenge covers how to exploit an IDOR when Mongo IDs are used
< 1 Hr. medium 1274 PRO
CVE-2008-5x8x_ii
This challenge covers the review of a CVE and its patch
 < 1 Hr. medium 702 PRO
Java Snippet #06
This challenge covers the review of a snippet of code written in Java
 < 1 Hr. medium 1484 PRO
CVE-2022-21449 JWT
This exercise covers the exploitation of CVE-2022-21449 against a Java Application relying on JWT
 < 1 Hr. medium 200 PRO
CVE-2021-33564 Argument Injection in Ruby Dragonfly
This exercise covers how you can get arbitrary file read using CVE-2021-33564 against Refinery CMS
 < 1 Hr. medium 167 PRO
Mongo IDOR II
This challenge covers how to recover a Mongo ID to leverage an IDOR
 < 1 Hr. medium 429 PRO
PHP Snippet #09
This challenge covers the review of a snippet of code written in PHP
 < 1 Hr. medium 1644 PRO
‹ 1 2 3 4 5 6 … 10 ›
Showing 61–90 of 273 exercises