Exercises
| Exercise | Avg. Time | Difficulty | Solved by | Tier | |
|---|---|---|---|---|---|
|
Javascript Snippet #01
This challenge covers the review of a snippet of code written in JavaScript
|
< 1 Hr. |  |
2336 | PRO |
|
|
Javascript Snippet #07
This challenge covers the review of a snippet of code written in JavaScript
|
< 1 Hr. | |
1806 | PRO |
|
|
Ruby Snippet #02
This challenge covers the review of a snippet of code written in Ruby
|
< 1 Hr. | |
1163 | PRO |
|
|
Ruby Snippet #04
This challenge covers the review of a snippet of code written in Ruby
|
< 1 Hr. | |
1075 | PRO |
|
|
Ruby Snippet #09
This challenge covers the review of a snippet of code written in Ruby
|
< 1 Hr. | |
909 | PRO |
|
HTTP 27
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3286 | PRO |
|
|
HTTP 28
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3276 | PRO |
|
|
HTTP 29
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3180 | PRO |
|
|
HTTP 21
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3524 | PRO |
|
|
HTTP 22
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3487 | PRO |
|
|
HTTP 24
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3384 | PRO |
|
|
HTTP 25
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3431 | PRO |
|
|
HTTP 20
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3527 | PRO |
|
|
HTTP 19
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3572 | PRO |
|
|
HTTP 12
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3868 | PRO |
|
|
HTTP 13
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3777 | PRO |
|
Express Local File Read
This exercise covers how an insecure call to render can be used to gain local files read with Express
|
< 1 Hr. | |
470 | PRO |
|
OAuth2: Authorization Server XSS
This exercise covers the exploitation of an XSS in an OAuth2 Authorization Server
|
< 1 Hr. | |
431 | PRO |
|
|
HTTP 09
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
4118 | PRO |
|
|
HTTP 02
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
4921 | PRO |
|
|
SAML: Comment Injection II
This exercise covers the exploitation of a comment injection vulnerability in SAML
|
< 1 Hr. | |
689 | PRO |
|
Recon 24
In this challenge, you need to look for a file named key.txt in the place used to serve the assets for the main website
|
< 1 Hr. | |
5736 | FREE |
|
|
Recon 26
In this challenge, you need to look for a key in the JavaScript used by the website
|
< 1 Hr. | |
5444 | FREE |
|
SSRF via FFMPEG
This exercise covers how you can read arbitrary files when an application uses ffmpeg to render videos from a video you provide
|
< 1 Hr. | |
271 | PRO |
|
|
Code Review 17
This exercise is one of our challenges to help you learn how to review real source code
|
< 1 Hr. | |
453 | PRO |
|
|
Recon 22
In this challenge, you need to look in repo9 for deleted files
|
< 1 Hr. | |
5428 | FREE |
|
|
SAML: SAMLResponse forwarding
This exercise covers how to pass the SAMLResponse from one Service Provider to another
|
< 1 Hr. | |
570 | PRO |
|
|
CGI and Signature
This exercise covers the exploitation of a vulnerable CGI.
|
< 1 Hr. | |
258 | PRO |
|
|
Recon 17
In this challenge, you need to look at the name of the developer used in the repository test1
|
< 1 Hr. | |
6171 | FREE |
|
|
Recon 18
In this challenge, you need to look at the public repository of the developers in the organisation
|
< 1 Hr. | |
5846 | FREE |
Showing 121–150 of 273 exercises
Free Labs of the Month
