Sign in Create Account

Exercises

Exercise Avg. Time Difficulty Solved by Tier
JWT Algorithm Confusion with ECDSA Public Key Recovery JWT
This exercise covers the exploitation of algorithm confusion when no public key is available with a ECDSA key
 1-2 Hr. hard 59 PRO
CVE-2022-458X1
This challenge covers the review of a CVE in a Java codebase and its patch
 < 1 Hr. easy 259 PRO
CVE-2015-3XX0
This challenge covers the review of a CVE in a Java codebase and its patch
 < 1 Hr. easy 197 PRO
CVE-2014-X80X
This challenge covers the review of a CVE in a Java codebase and its patch
 < 1 Hr. medium 219 PRO
SAML: CVE-2021-21239
This exercise covers the exploitation of CVE-2021-21239 (PySAML2)
 < 1 Hr. medium 150 PRO
CVE-2023-2XX61
This challenge covers the review of a CVE in a Java codebase and its patch
 < 1 Hr. easy 222 PRO
CVE-2023-2XX60
This challenge covers the review of a CVE in a Java codebase and its patch
 < 1 Hr. easy 208 PRO
CVE-2022-393XX
This challenge covers the review of a CVE in a Java codebase and its patch
 < 1 Hr. easy 214 PRO
SAML: Malicious IDP
This exercise covers the creation of a malicious IDP to forge an assertion
 < 1 Hr. hard 99 PRO
DOMPDF RCE IV
This exercise covers the automation of the exploitation of a vulnerability in the DOMPDF library
 1-2 Hr. hard 36 PRO
SAML: Signature Wrapping III
This exercise covers the exploitation of a Signature Wrapping Issue in passport-saml (CVE-2022-39299)
 < 1 Hr. medium 207 PRO
XSL Java
This exercise covers the exploitation of a Java application using XSL
< 1 Hr. medium 140 PRO
DOMPDF RCE III
This exercise covers the exploitation of a vulnerability in the DOMPDF library
 < 1 Hr. medium 67 PRO
XSL PHP V
This exercise covers the exploitation of a PHP application using XSL
< 1 Hr. hard 131 PRO
API Payments 07
This exercise covers a way to manipulate a shopping cart to lower the total amount
 < 1 Hr. medium 1034 PRO
CVE-2021-22204: Exiftool RCE II
This exercise covers how you can gain code execution when an application uses exiftool on user-controlled files
 < 1 Hr. medium 91 PRO
XSL PHP IV
This exercise covers the exploitation of a PHP application using XSL
< 1 Hr. medium 167 PRO
API Payments 06
This exercise covers a simple payments bypass.
 < 1 Hr. medium 1067 PRO
CVE-2022-39224
This exercise covers the exploitation of CVE-2022-39224
 < 1 Hr. medium 116 PRO
XSL PHP III
This exercise covers the exploitation of a PHP application using XSL
< 1 Hr. medium 188 PRO
DOMPDF RCE II
This exercise covers the exploitation of a vulnerability in the DOMPDF library
 < 1 Hr. medium 83 PRO
DOMPDF RCE
This exercise covers the exploitation of a vulnerability in the DOMPDF library
 < 1 Hr. medium 170 PRO
API Payments 05
This exercise covers how to abuse a shopping cart allowing users to apply a voucher.
 < 1 Hr. hard 972 PRO
XSL PHP II
This exercise covers the exploitation of a PHP application using XSL
< 1 Hr. medium 256 PRO
API Payments 04
This exercise covers how to abuse a shopping cart allowing users to apply a voucher..
 < 1 Hr. medium 1288 PRO
XSL PHP
This exercise covers the exploitation of a PHP application using XSL
< 1 Hr. medium 301 PRO
API Payments 03
This exercise covers a simple payments bypass.
 < 1 Hr. medium 1401 PRO
Code Review 18
This exercise is one of our challenges to help you learn how to review real source code
 < 1 Hr. medium 429 PRO
CVE-2020-13xxx
This challenge covers the review of a CVE and its patch
 < 1 Hr. medium 721 PRO
CVE-2008-5x8x
This challenge covers the review of a CVE and its patch
 < 1 Hr. easy 896 PRO
‹ 1 … 8 9 10 11 12 13 14 … 27 ›
Showing 301–330 of 805 exercises