Sign in Create Account

Exercises

Exercise Avg. Time Difficulty Solved by Tier
SAML: Trusted Embedded Key
This exercise covers the exploitation of a Service Provider (SP) that doesn't check the certificate provided in the SAMLResponse
 < 1 Hr. medium 548 PRO
Recon 08
This exercise covers aliases in TLS certificates
 < 1 Hr. medium 10272 FREE
SAML: Known Key
This exercise covers the exploitation of a known key in SAML
 1-2 Hr. medium 563 PRO
Recon 04
This exercise covers common interesting directories
 < 1 Hr. medium 17523 FREE
Recon 05
This exercise covers simple directory bruteforcing
 < 1 Hr. medium 12805 FREE
Recon 01
This exercise covers 404 error pages
 < 1 Hr. medium 22912 FREE
Zip symlink
This exercise covers how you can create a malicious Zip file and use it to gain access to sensitive files.
 < 1 Hr. medium 611 PRO
SAML: Comment Injection
This exercise covers the exploitation of a comment injection vulnerability in SAML
 < 1 Hr. medium 1783 PRO
Unicode and Downcase
This exercise covers how you can use unicode to gain access to an admin account.
 < 1 Hr. medium 617 PRO
Recon 10
This exercise covers visual content discovery
 < 1 Hr. medium 6983 FREE
Unicode and Uppercase
This exercise covers how you can use unicode to gain access to an admin account.
 < 1 Hr. medium 696 PRO
Code Review 06
This exercise is one of our challenges to help you learn how to review real source code
 2-4 Hr. medium 411 PRO
From SQL injection to Shell III: PostgreSQL Edition SQL Injection
This exercise covers how to gain access to an administration interface using a SQL injection, and how to get command execution using Ghostscript
 2-4 Hr. medium 267 PRO
OAuth2: Client CSRF II
This exercise covers the exploitation of a CSRF in an OAuth2 Client
 2-4 Hr. medium 506 PRO
OAuth2: Client CSRF
This exercise covers the exploitation of a CSRF in an OAuth2 Client
 < 1 Hr. medium 987 PRO
SVG XSS
This exercise covers how to use an SVG to trigger a Cross-Site-Scripting
 < 1 Hr. medium 1916 PRO
Apache Pluto RCE
This exercise covers how to gain code execution on Apache Pluto 3.0.0 due to a flaw in the authorization logic
 < 1 Hr. medium 566 PRO
JSON Cross-Site Request Forgery
This exercise details the exploitation of a Cross-Site Request Forgery when JSON is used
 < 1 Hr. medium 1531 PRO
Cross-Site Request Forgery
This exercise details the exploitation of a Cross-Site Request Forgery to gain access to sensitive data
 < 1 Hr. medium 1574 PRO
Code Review 02
This exercise is one of our challenges to help you learn how to review real source code
 1-2 Hr. medium 684 PRO
postMessage() IV
This exercise covers how insecure calls to the JavaScript function postMessage() can be used to leak sensitive information when a listener does not filter the Origin and X-Frame-Options is used
 < 1 Hr. medium 1006 PRO
Code Review 01
This exercise is one of our challenges to help you learn how to review real source code
 1-2 Hr. medium 949 PRO
Spring Actuators
This exercise covers how you can gain code execution using Spring Actuators when Spring Cloud is used.
 1-2 Hr. medium 304 PRO
postMessage() III
This exercise covers how insecure calls to the JavaScript function postMessage() can be used to trigger a Cross-Site Scripting
 < 1 Hr. medium 1023 PRO
postMessage() II
This exercise covers how insecure calls to the JavaScript function postMessage() can be used to leak sensitive information when a listener does not filter the Origin
 < 1 Hr. medium 1136 PRO
PHP phar://
This exercise covers how the PHP phar:// handler can be used to gain code execution using PHP unserialize.
 < 1 Hr. medium 367 PRO
JSON Web Encryption
This exercise covers how you can create your own JWE if you have access to the public key used by the server
 < 1 Hr. medium 557 PRO
postMessage()
This exercise covers how insecure calls to the JavaScript function postMessage() can be used to leak sensitive information
 < 1 Hr. medium 1298 PRO
Cross-Site WebSocket Hijacking
This exercise covers Cross-Site WebSocket Hijacking and how it can be used to gain access to sensitive information
 < 1 Hr. medium 1130 PRO
Cross-Origin Resource Sharing II
This exercise covers Cross-Origin Resource Sharing and how it can be used to get access to sensitive data.
 < 1 Hr. medium 1080 PRO
‹ 1 … 3 4 5 6 7 8 9 ›
Showing 151–180 of 262 exercises