Penetration Testing, Security Code Review and Web App Security Exercises

Free PRO CVE Easy Medium Hard XSS Code Review API SSRF HTTP RECON CSRF SQLi

Exercise	Avg. Time	Solved by	Tier
OAuth2: Authorization Server XSS II This exercise covers the exploitation of an XSS in an OAuth2 Authorization Server	< 1 Hr.	282	PRO
OAuth2: Authorization Server XSS This exercise covers the exploitation of an XSS in an OAuth2 Authorization Server	< 1 Hr.	393	PRO
OAuth2: Client Server XSS This exercise covers the exploitation of a Cross-Site Scripting in an OAuth2 Client and Server	1-2 Hr.	379	PRO
XSS Include XSS This exercise covers how to use Cross-Site-Scripting Include to leak information	< 1 Hr.	1375	PRO
SVG XSS This exercise covers how to use an SVG to trigger a Cross-Site-Scripting	< 1 Hr.	1883	PRO

Showing 1–5 of 5 exercises