Sign in Create Account

Exercises

Exercise Avg. Time Difficulty Solved by Tier
Recon 19
In this challenge, you need to look at the email addresses used for commits in the repository repo7
 < 1 Hr. medium 5490 FREE
Code Review 15
This exercise is one of our challenges to help you learn how to review real source code
 < 1 Hr. medium 545 PRO
Code Review 14
This exercise is one of our challenges to help you learn how to review real source code
 < 1 Hr. medium 573 PRO
CVE-2020-14343: PyYAML unsafe loader
This exercise covers how you can gain code execution when an application use a vulnerable version of PyYAML and relies on load()
 < 1 Hr. medium 385 PRO
OAuth2: State Fixation
This exercise covers the exploitation of a state fixation in an OAuth2 Client
 < 1 Hr. medium 445 PRO
CVE-2020-7115: Aruba Clearpass RCE
This exercise covers a remote command execution issue on Aruba Clearpass RCE
 < 1 Hr. medium 246 PRO
Code Review 12
This exercise is one of our challenges to help you learn how to review real source code
 < 1 Hr. medium 612 PRO
Recon 16
In this challenge, you need to find the version of Bind used
 < 1 Hr. medium 6060 FREE
EDDSA vulnerability in Monocypher Crypto
This exercise covers the exploitation of a vulnerability impacting Monocypher.
 < 1 Hr. medium 209 PRO
Code Review 10
This exercise is one of our challenges to help you learn how to review real source code
 < 1 Hr. medium 533 PRO
Unicode and NFKC
This exercise covers how to leverage unicode to exploit a directory traversal
 < 1 Hr. medium 348 PRO
SAML: Trusted Embedded Key
This exercise covers the exploitation of a Service Provider (SP) that doesn't check the certificate provided in the SAMLResponse
 < 1 Hr. medium 566 PRO
Recon 08
This exercise covers aliases in TLS certificates
 < 1 Hr. medium 10607 FREE
SAML: Known Key
This exercise covers the exploitation of a known key in SAML
 < 1 Hr. medium 579 PRO
Recon 04
This exercise covers common interesting directories
 < 1 Hr. medium 18113 FREE
Recon 05
This exercise covers simple directory bruteforcing
 < 1 Hr. medium 13222 FREE
Recon 01
This exercise covers 404 error pages
 < 1 Hr. medium 23705 FREE
Zip symlink
This exercise covers how you can create a malicious Zip file and use it to gain access to sensitive files.
 < 1 Hr. medium 624 PRO
SAML: Comment Injection
This exercise covers the exploitation of a comment injection vulnerability in SAML
 < 1 Hr. medium 1825 PRO
Unicode and Downcase
This exercise covers how you can use unicode to gain access to an admin account.
 < 1 Hr. medium 630 PRO
Recon 10
This exercise covers visual content discovery
 < 1 Hr. medium 7194 FREE
Unicode and Uppercase
This exercise covers how you can use unicode to gain access to an admin account.
 < 1 Hr. medium 708 PRO
Code Review 06
This exercise is one of our challenges to help you learn how to review real source code
 < 1 Hr. medium 439 PRO
From SQL injection to Shell III: PostgreSQL Edition SQL Injection
This exercise covers how to gain access to an administration interface using a SQL injection, and how to get command execution using Ghostscript
 < 1 Hr. medium 282 PRO
OAuth2: Client CSRF II
This exercise covers the exploitation of a CSRF in an OAuth2 Client
 1-2 Hr. medium 524 PRO
OAuth2: Client CSRF
This exercise covers the exploitation of a CSRF in an OAuth2 Client
 < 1 Hr. medium 1014 PRO
SVG XSS
This exercise covers how to use an SVG to trigger a Cross-Site-Scripting
 < 1 Hr. medium 1927 PRO
Apache Pluto RCE
This exercise covers how to gain code execution on Apache Pluto 3.0.0 due to a flaw in the authorization logic
 < 1 Hr. medium 579 PRO
JSON Cross-Site Request Forgery
This exercise details the exploitation of a Cross-Site Request Forgery when JSON is used
 < 1 Hr. medium 1545 PRO
Cross-Site Request Forgery
This exercise details the exploitation of a Cross-Site Request Forgery to gain access to sensitive data
 < 1 Hr. medium 1585 PRO
‹ 1 … 3 4 5 6 7 8 9 … 10 ›
Showing 151–180 of 273 exercises