Sign in Create Account

Exercises

Exercise Avg. Time Difficulty Solved by Tier
Cross-Site WebSocket Hijacking
This exercise covers Cross-Site WebSocket Hijacking and how it can be used to gain access to sensitive information
 < 1 Hr. medium 1148 PRO
Cross-Origin Resource Sharing II
This exercise covers Cross-Origin Resource Sharing and how it can be used to get access to sensitive data.
 < 1 Hr. medium 1099 PRO
OAuth2: Client OpenRedirect
This exercise covers the exploitation of an OpenRedirect in an OAuth2 Client
 < 1 Hr. medium 885 PRO
GraphQL: SQL Injection
This exercise covers how to use introspection and a SQL injection to get access to additional information in GraphQL.
 < 1 Hr. medium 1536 PRO
OAuth2: Authorization Server OpenRedirect
This exercise covers the exploitation of an OpenRedirect in an OAuth2 Authorization Server
 < 1 Hr. medium 1003 PRO
SAML: Signature Stripping
This exercise covers the exploitation of a signature stripping vulnerability in SAML
 < 1 Hr. medium 2222 PRO
Android 05
This exercise will guide you through the process of reversing a simple obfuscated Android code to recover the encrypted data
 < 1 Hr. medium 2087 PRO
Ruby 2.x Universal RCE Deserialization Gadget Chain
This exercise covers how to get code execution by using a Ruby Universal Gadget when an attacker controls the data passed to Marshal.load()
 < 1 Hr. medium 1462 PRO
Android 04
This exercise will guide you through the process of reversing a simple Android code
 < 1 Hr. medium 2633 PRO
Android 03
This exercise will guide you through the process of extracting simple information from an APK
 < 1 Hr. medium 3484 PRO
JWT V JWT
This exercise covers the exploitation of a trivial secret used to sign JWT tokens.
 < 1 Hr. medium 3223 PRO
JWT IV JWT
This exercise covers the exploitation of a vulnerability similar to the recent CVE-2017-17405 impacting Ruby Net::FTP
 < 1 Hr. medium 2801 PRO
CVE-2016-10033: PHPMailer RCE
This exercise covers a remote code execution vulnerability in PHPMailer
 < 1 Hr. medium 3864 PRO
Cipher block chaining Crypto
This exercise details how to tamper with data encrypted using CBC
 < 1 Hr. medium 3043 PRO
Struts s2-045
This exercise covers a Remote Code Execution in Struts 2.
 < 1 Hr. medium 2864 PRO
CVE-2016-2098
This exercise covers a remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data
 < 1 Hr. medium 3772 PRO
Werkzeug DEBUG
This challenge was written for Ruxcon CTF 2015 and cover the Debug mode of Werkzeug/Flask
 < 1 Hr. medium 1644 PRO
CVE-2015-3224
This exercise is a challenge written for Nullcon CTF in 2015
 < 1 Hr. medium 1654 PRO
CVE-2013-0156: Rails Object Injection
This exercise covers the exploitation of a code execution in Ruby-on-Rails using XML and YAML.
 < 1 Hr. medium 4097 PRO
JWT Algorithm Confusion JWT
This exercise covers the exploitation of an issue with some implementations of JWT
 < 1 Hr. medium 3921 PRO
CVE-2016-0792
This exercise covers the exploitation of an Xstream vulnerability in Jenkins
 < 1 Hr. medium 4911 PRO
ObjectInputStream
This exercise covers the exploitation of a call to readObject in a Spring application
 < 1 Hr. medium 4407 PRO
XMLDecoder
This exercise covers the exploitation of an application using XMLDecoder
 < 1 Hr. medium 5517 PRO
Intercept 03
This exercise covers how to intercept an HTTPs connection with hostname verification.
 < 1 Hr. medium 1518 PRO
Intercept 02
This exercise covers how to intercept an HTTPs connection.
 < 1 Hr. medium 1673 PRO
Struts devMode
This exercise covers how to get code execution when a Struts application is running in devMode
 medium 0 PRO
Cross-Origin Resource Sharing
This exercise covers Cross-Origin Resource Sharing and how it can be used to bypass CSRF protection if it's misconfigured
 medium 0 PRO
Pickle Code Execution
This exercise covers the exploitation of Python's pickle when used to deserialize untrusted data
 < 1 Hr. medium 6600 PRO
‹ 1 2 ›
Showing 31–58 of 58 exercises