Penetration Testing, Security Code Review and Web App Security Exercises

Free PRO CVE Easy Medium Hard XSS Code Review API SSRF HTTP RECON CSRF SQLi

Exercise	Avg. Time	Solved by	Tier
OAuth2: Authorization Server XSS II This exercise covers the exploitation of an XSS in an OAuth2 Authorization Server	< 1 Hr.	281	PRO
OAuth2: Authorization Server XSS This exercise covers the exploitation of an XSS in an OAuth2 Authorization Server	< 1 Hr.	386	PRO
OAuth2: Client Server XSS This exercise covers the exploitation of a Cross-Site Scripting in an OAuth2 Client and Server	1-2 Hr.	378	PRO
XSS Include XSS This exercise covers how to use Cross-Site-Scripting Include to leak information	< 1 Hr.	1365	PRO
SVG XSS This exercise covers how to use an SVG to trigger a Cross-Site-Scripting	< 1 Hr.	1827	PRO

Showing 1–5 of 5 exercises