Exercises
| Exercise | Avg. Time | Difficulty | Solved by | Tier | |
|---|---|---|---|---|---|
|
Code Execution 05
This exercise is one of our challenges on Code Execution
|
< 1 Hr. |  |
12770 | PRO |
|
|
Code Execution 07
This exercise is one of our challenges on Code Execution
|
< 1 Hr. | |
12221 | PRO |
|
SQL Injection 06
SQL Injection
This exercise is one of our challenges on SQL Injections
|
< 1 Hr. | |
9692 | PRO |
|
|
XML Attacks 01
This exercise is one of our challenges on vulnerabilities related to XML processing
|
< 1 Hr. | |
9297 | PRO |
|
|
XML Attacks 02
This exercise is one of our challenges on vulnerabilities related to XML processing
|
< 1 Hr. | |
8786 | PRO |
|
|
SQL Injection 04
SQL Injection
This exercise is one of our challenges on SQL Injections
|
< 1 Hr. | |
10301 | PRO |
|
|
Command Execution 02
This exercise is one of our challenges on Command Execution
|
< 1 Hr. | |
11779 | PRO |
|
|
Open Redirect 01
This exercise is one of our challenges on Open Redirect
|
< 1 Hr. | |
10315 | PRO |
|
|
Open Redirect 02
This exercise is one of our challenges on Open Redirect
|
< 1 Hr. | |
9982 | PRO |
|
|
MongoDB Injection 01
This exercise is one of our challenges on vulnerabilities related to MongoDB
|
< 1 Hr. | |
10383 | PRO |
|
XSS 09
XSS
This exercise is one of our challenges on Cross-Site Scripting
|
< 1 Hr. | |
9506 | PRO |
|
|
XSS 10
XSS
This exercise is one of our challenges on Cross-Site Scripting
|
< 1 Hr. | |
8782 | PRO |
|
|
XSS 03
XSS
This exercise is one of our challenges on Cross-Site Scripting
|
< 1 Hr. | |
10866 | PRO |
|
|
XSS 05
XSS
This exercise is one of our challenges on Cross-Site Scripting
|
< 1 Hr. | |
10041 | PRO |
|
|
XSS 06
XSS
This exercise is one of our challenges on Cross-Site Scripting
|
< 1 Hr. | |
9935 | PRO |
|
|
XSS 07
XSS
This exercise is one of our challenges on Cross-Site Scripting
|
< 1 Hr. | |
9764 | PRO |
|
|
XSS 08
XSS
This exercise is one of our challenges on Cross-Site Scripting
|
< 1 Hr. | |
9601 | PRO |
|
|
Authentication 05
This exercise is one of our challenges on Authentication issues
|
< 1 Hr. | |
18009 | PRO |
|
|
Code Execution 03
This exercise is one of our challenges on Code Execution
|
< 1 Hr. | |
13442 | PRO |
|
|
Code Execution 04
This exercise is one of our challenges on Code Execution
|
< 1 Hr. | |
13175 | PRO |
|
|
File Include 01
This exercise is one of our challenges on File Include vulnerabilities
|
< 1 Hr. | |
11384 | PRO |
|
|
LDAP 02
This exercise is one of our challenges on vulnerabilities related to LDAP
|
< 1 Hr. | |
10554 | PRO |
|
CVE-2016-10033: PHPMailer RCE
This exercise covers a remote code execution vulnerability in PHPMailer
|
< 1 Hr. | |
3849 | PRO |
|
|
Cipher block chaining
Crypto
This exercise details how to tamper with data encrypted using CBC
|
1-2 Hr. | |
3026 | PRO |
|
|
Struts s2-045
This exercise covers a Remote Code Execution in Struts 2.
|
< 1 Hr. | |
2852 | PRO |
|
|
CVE-2016-2098
This exercise covers a remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data
|
< 1 Hr. | |
3757 | PRO |
|
|
CVE-2014-4511: Gitlist RCE
This exercise explains how you can exploit a vulnerability published in 2014 in Gitlist.
|
< 1 Hr. | |
16 | FREE |
|
|
Werkzeug DEBUG
This challenge was written for Ruxcon CTF 2015 and cover the Debug mode of Werkzeug/Flask
|
< 1 Hr. | |
1634 | PRO |
|
|
Padding Oracle
This exercise covers an attack against CBC mode. This attack can be used to decrypt data and re-encrypt arbitrary data
|
1-2 Hr. | |
856 | FREE |
|
|
CVE-2015-3224
This exercise is a challenge written for Nullcon CTF in 2015
|
< 1 Hr. | |
1646 | PRO |
Showing 211–240 of 262 exercises
Free Labs of the Month
