Exercises
| Exercise | Avg. Time | Difficulty | Solved by | Tier | |
|---|---|---|---|---|---|
|
|
CVE-2008-5x8x
This challenge covers the review of a CVE and its patch
|
< 1 Hr. | 896 | PRO | |
|
|
Python Snippet #02
This challenge covers the review of a snippet of code written in Python
|
< 1 Hr. | 2145 | PRO | |
|
|
Java Snippet #12
This challenge covers the review of a snippet of code written in Java
|
< 1 Hr. | 1432 | PRO | |
|
|
Java Snippet #11
This challenge covers the review of a snippet of code written in Java
|
< 1 Hr. | 1480 | PRO | |
|
|
Java Snippet #10
This challenge covers the review of a snippet of code written in Java
|
< 1 Hr. | 1583 | PRO | |
|
|
API Payments 02
This exercise covers a simple payments bypass.
|
< 1 Hr. | 1570 | PRO | |
|
|
GCM Nonce Reuse
This challenge covers the impact of nonce reuse on GCM
|
< 1 Hr. | 199 | PRO | |
|
|
CVE-2019-5x2x
This challenge covers the review of a CVE and its patch
|
< 1 Hr. | 658 | PRO | |
|
|
Java Snippet #09
This challenge covers the review of a snippet of code written in Java
|
< 1 Hr. | 1445 | PRO | |
|
|
Java Snippet #08
This challenge covers the review of a snippet of code written in Java
|
< 1 Hr. | 1829 | PRO | |
|
|
Java Snippet #07
This challenge covers the review of a snippet of code written in Java
|
< 1 Hr. | 1812 | PRO | |
|
|
API Payments 01
API
This exercise covers a simple payments bypass.
|
< 1 Hr. | 2066 | PRO | |
|
|
CVE-2022-26xx9
This challenge covers a vulnerable snippet in a real Java application
|
< 1 Hr. | 671 | PRO | |
|
|
Python Snippet #09
This challenge covers the review of a snippet of code written in Python
|
< 1 Hr. | 1922 | PRO | |
|
|
Python Snippet #08
This challenge covers the review of a snippet of code written in Python
|
< 1 Hr. | 1688 | PRO | |
|
|
Python Snippet #07
This challenge covers the review of a snippet of code written in Python
|
< 1 Hr. | 1775 | PRO | |
|
|
Mongo IDOR
This challenge covers how to exploit an IDOR when Mongo IDs are used
|
< 1 Hr. | 1253 | PRO | |
|
|
CVE-2008-5x8x_ii
This challenge covers the review of a CVE and its patch
|
< 1 Hr. | 690 | PRO | |
|
|
CVE-2005-2x8x
This challenge covers the review of a CVE and its patch
|
< 1 Hr. | 684 | PRO | |
|
|
Java Snippet #06
This challenge covers the review of a snippet of code written in Java
|
< 1 Hr. | 1466 | PRO | |
|
|
Golang Snippet #01
This challenge covers the review of a snippet of code written in Golang
|
< 1 Hr. | 1889 | PRO | |
|
|
Python Snippet #06
This challenge covers the review of a snippet of code written in Python
|
< 1 Hr. | 1913 | PRO | |
|
|
CVE-2022-21449
JWT
This exercise covers the exploitation of CVE-2022-21449 against a Java Application relying on JWT
|
< 1 Hr. | 195 | PRO | |
|
|
CVE-2021-33564 Argument Injection in Ruby Dragonfly
This exercise covers how you can get arbitrary file read using CVE-2021-33564 against Refinery CMS
|
< 1 Hr. | 160 | PRO | |
|
|
Mongo IDOR II
This challenge covers how to recover a Mongo ID to leverage an IDOR
|
< 1 Hr. | 406 | PRO | |
|
|
CVE-2021-45xx9
This challenge covers a vulnerable snippet in a real Python application
|
< 1 Hr. | 831 | PRO | |
|
|
PHP Snippet #07
This challenge covers the review of a snippet of code written in PHP
|
< 1 Hr. | 1836 | PRO | |
|
|
PHP Snippet #09
This challenge covers the review of a snippet of code written in PHP
|
< 1 Hr. | 1623 | PRO | |
|
|
PHP Snippet #08
This challenge covers the review of a snippet of code written in PHP
|
< 1 Hr. | 1721 | PRO | |
|
|
Python Snippet #03
This challenge covers the review of a snippet of code written in Python
|
< 1 Hr. | 1967 | PRO |
Showing 331–360 of 805 exercises
Free Labs of the Month