Exercises

This exercise covers how to use Cross-Site-Scripting Include to leak information

This exercise covers the exploitation of a CSRF in an OAuth2 Authorization Server

This exercise covers how to use introspection to get access to additional information in GraphQL.

This exercise will guide you through the process of extracting simple information from an APK

This exercise covers the exploitation of a signature stripping vulnerability in SAML

This exercise will guide you through the process of scoring on an exercise to get it marked as completed

This exercise will guide through the process of scoring an exercise to mark it as completed

This exercise will guide through the process of scoring an exercise to mark it as completed. Finding the key is just a little bit harder than the previous exercise.

This exercise will guide through the process of scoring an exercise to mark it as completed. However, this time, you will run commands on the underlying operating system. You will need to run the score command with your UUID.

This exercise covers how to intercept an HTTP connection.

This exercise covers the exploitation of a signature weakness in a JWT library.