Exercises

Exercise Avg. Time Difficulty Solved by Tier
CVE-2021-4379x
This challenge covers the review of a CVE and its patch
< 1 Hr. easy 770 PRO
API 08
This exercise covers how one can inspect HTTP responses to identify information leaks.
< 1 Hr. medium 1836 PRO
CVE-2021-4xx50
This challenge covers the review of a CVE and its patch
< 1 Hr. medium 856 PRO
JDBC RCE
This exercise is one of our challenges to help you learn Java Serialisation exploitation
2-4 Hr. medium 72 PRO
CVE-2008-1x3x
This challenge covers the review of a CVE and its patch
< 1 Hr. easy 1037 PRO
TypeScript Snippet #03
This challenge covers the review of a snippet of code written in TypeScript
< 1 Hr. medium 1381 PRO
TypeScript Snippet #02
This challenge covers the review of a snippet of code written in TypeScript
< 1 Hr. easy 1492 PRO
TypeScript Snippet #01
This challenge covers the review of a snippet of code written in TypeScript
< 1 Hr. easy 1532 PRO
Golang Snippet #12
This challenge covers the review of a snippet of code written in Golang
< 1 Hr. medium 1110 PRO
API 07 API Angular
This exercise covers how one can inspect JavaScript code to identify information leak.
< 1 Hr. medium 1933 PRO
CVE-2021-40438
This challenge covers how to trigger a Server-Side Request Forgery by leveraging CVE-2021-40438
< 1 Hr. medium 356 PRO
CVE-2021-41773 II
This challenge covers how to gain code execution by leveraging CVE-2021-41773
1-2 Hr. medium 221 PRO
CVE-2021-41773
This challenge covers how to read arbitrary files by leveraging CVE-2021-41773
< 1 Hr. easy 576 PRO
HTTP 40
This challenge covers how to send specific HTTP requests
< 1 Hr. medium 2964 PRO
HTTP 36
This challenge covers how to send specific HTTP requests
< 1 Hr. medium 2942 PRO
HTTP 37
This challenge covers how to send specific HTTP requests
< 1 Hr. medium 2915 PRO
HTTP 38
This challenge covers how to send specific HTTP requests
< 1 Hr. medium 2969 PRO
HTTP 39
This challenge covers how to send specific HTTP requests
< 1 Hr. easy 2950 PRO
CVE-2006-4xxx_ii
This challenge covers the review of a CVE and its patch
< 1 Hr. easy 689 PRO
CVE-2006-4xxx
This challenge covers the review of a CVE and its patch
< 1 Hr. easy 803 PRO
PHP Snippet #06
This challenge covers the review of a snippet of code written in PHP
< 1 Hr. easy 1894 PRO
PHP Snippet #05
This challenge covers the review of a snippet of code written in PHP
< 1 Hr. medium 1806 PRO
PHP Snippet #04
This challenge covers the review of a snippet of code written in PHP
< 1 Hr. medium 1898 PRO
API 06 API Angular
This exercise covers how one can inspect JavaScript code to identify unused endpoints.
< 1 Hr. easy 2066 PRO
Java Snippet #01
This challenge covers the review of a snippet of code written in Java
< 1 Hr. easy 1909 PRO
Java Snippet #02
This challenge covers the review of a snippet of code written in Java
< 1 Hr. medium 1849 PRO
Java Snippet #03
This challenge covers the review of a snippet of code written in Java
< 1 Hr. easy 1706 PRO
CVE-2021-37xxx
This challenge covers the review of a CVE and its patch
< 1 Hr. easy 784 PRO
PHP Snippet #01
This challenge covers the review of a snippet of code written in PHP
< 1 Hr. easy 2564 PRO
PHP Snippet #02
This challenge covers the review of a snippet of code written in PHP
< 1 Hr. medium 2242 PRO
1 9 10 11 12 13 14 15 26
Showing 331–360 of 753 exercises