Sign in Create Account

Exercises

Exercise Avg. Time Difficulty Solved by Tier
CVE-2022-21449 JWT
This exercise covers the exploitation of CVE-2022-21449 against a Java Application relying on JWT
 < 1 Hr. medium 186 PRO
CVE-2021-33564 Argument Injection in Ruby Dragonfly
This exercise covers how you can get arbitrary file read using CVE-2021-33564 against Refinery CMS
 < 1 Hr. medium 152 PRO
CVE-2021-45xx9
This challenge covers a vulnerable snippet in a real Python application
 < 1 Hr. easy 806 PRO
Mongo IDOR II
This challenge covers how to recover a Mongo ID to leverage an IDOR
 < 1 Hr. medium 372 PRO
PHP Snippet #08
This challenge covers the review of a snippet of code written in PHP
 < 1 Hr. hard 1677 PRO
PHP Snippet #09
This challenge covers the review of a snippet of code written in PHP
 < 1 Hr. medium 1584 PRO
PHP Snippet #07
This challenge covers the review of a snippet of code written in PHP
 < 1 Hr. easy 1788 PRO
Python Snippet #05
This challenge covers the review of a snippet of code written in Python
 < 1 Hr. easy 1943 PRO
Python Snippet #04
This challenge covers the review of a snippet of code written in Python
 < 1 Hr. easy 1758 PRO
Python Snippet #03
This challenge covers the review of a snippet of code written in Python
 < 1 Hr. easy 1910 PRO
CVE-2021-39x3x
This challenge covers the review of a CVE and its patch
 < 1 Hr. easy 669 PRO
CVE-2022-21724: JDBC RCE PostgreSQL
This challenge covers how to gain code execution by leveraging a JDBC connection string with PostgreSQL
 < 1 Hr. medium 201 PRO
Java Snippet #05
This challenge covers the review of a snippet of code written in Java
 < 1 Hr. easy 1540 PRO
Java Snippet #04
This challenge covers the review of a snippet of code written in Java
 < 1 Hr. easy 1693 PRO
Ox Remote Code Execution II
This exercise covers how you can gain code execution when an application is using Ox to deserialize data and is running on Ruby 2.7
 2-4 Hr. hard 42 PRO
CVE-2009-3x8x
This challenge covers the review of a CVE and its patch
 < 1 Hr. easy 821 PRO
HTTP 43
This challenge covers how to send specific HTTP requests
 < 1 Hr. medium 2670 PRO
HTTP 42
This challenge covers how to send specific HTTP requests
 < 1 Hr. medium 2767 PRO
HTTP 41
This challenge covers how to send specific HTTP requests
 < 1 Hr. medium 2740 PRO
CVE-2021-381xx
This challenge covers the review of a CVE and its patch
 < 1 Hr. medium 700 PRO
H2 RCE
This challenge covers how to gain code execution by leveraging an H2 database in a Java application
 < 1 Hr. easy 142 PRO
TypeScript Snippet #05
This challenge covers the review of a snippet of code written in TypeScript
 < 1 Hr. medium 1320 PRO
TypeScript Snippet #09
This challenge covers the review of a snippet of code written in TypeScript
 < 1 Hr. medium 1227 PRO
TypeScript Snippet #08
This challenge covers the review of a snippet of code written in TypeScript
 < 1 Hr. easy 1195 PRO
TypeScript Snippet #04
This challenge covers the review of a snippet of code written in TypeScript
 < 1 Hr. easy 1294 PRO
TypeScript Snippet #06
This challenge covers the review of a snippet of code written in TypeScript
 < 1 Hr. easy 1183 PRO
TypeScript Snippet #07
This challenge covers the review of a snippet of code written in TypeScript
 < 1 Hr. easy 1125 PRO
CVE-2008-4x9x
This challenge covers the review of a CVE and its patch
 < 1 Hr. easy 771 PRO
Log4j RCE II
This exercise is one of our challenges to help you learn Java Serialisation exploitation
 1-2 Hr. easy 186 PRO
Log4j RCE
This challenge covers the latest RCE in Log4j
 1-2 Hr. easy 310 PRO
‹ 1 … 8 9 10 11 12 13 14 … 26 ›
Showing 301–330 of 753 exercises