Exercises
| Exercise | Avg. Time | Difficulty | Solved by | Tier | |
|---|---|---|---|---|---|
|
|
CVE-2021-4379x
This challenge covers the review of a CVE and its patch
|
< 1 Hr. | 770 | PRO | |
|
|
API 08
This exercise covers how one can inspect HTTP responses to identify information leaks.
|
< 1 Hr. | 1836 | PRO | |
|
|
CVE-2021-4xx50
This challenge covers the review of a CVE and its patch
|
< 1 Hr. | 856 | PRO | |
|
|
JDBC RCE
This exercise is one of our challenges to help you learn Java Serialisation exploitation
|
2-4 Hr. | 72 | PRO | |
|
|
CVE-2008-1x3x
This challenge covers the review of a CVE and its patch
|
< 1 Hr. | 1037 | PRO | |
|
|
TypeScript Snippet #03
This challenge covers the review of a snippet of code written in TypeScript
|
< 1 Hr. | 1381 | PRO | |
|
|
TypeScript Snippet #02
This challenge covers the review of a snippet of code written in TypeScript
|
< 1 Hr. | 1492 | PRO | |
|
|
TypeScript Snippet #01
This challenge covers the review of a snippet of code written in TypeScript
|
< 1 Hr. | 1532 | PRO | |
|
|
Golang Snippet #12
This challenge covers the review of a snippet of code written in Golang
|
< 1 Hr. | 1110 | PRO | |
|
|
API 07
API
Angular
This exercise covers how one can inspect JavaScript code to identify information leak.
|
< 1 Hr. | 1933 | PRO | |
|
|
CVE-2021-40438
This challenge covers how to trigger a Server-Side Request Forgery by leveraging CVE-2021-40438
|
< 1 Hr. | 356 | PRO | |
|
|
CVE-2021-41773 II
This challenge covers how to gain code execution by leveraging CVE-2021-41773
|
1-2 Hr. | 221 | PRO | |
|
|
CVE-2021-41773
This challenge covers how to read arbitrary files by leveraging CVE-2021-41773
|
< 1 Hr. | 576 | PRO | |
|
|
HTTP 40
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | 2964 | PRO | |
|
|
HTTP 36
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | 2942 | PRO | |
|
|
HTTP 37
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | 2915 | PRO | |
|
|
HTTP 38
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | 2969 | PRO | |
|
|
HTTP 39
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | 2950 | PRO | |
|
|
CVE-2006-4xxx_ii
This challenge covers the review of a CVE and its patch
|
< 1 Hr. | 689 | PRO | |
|
|
CVE-2006-4xxx
This challenge covers the review of a CVE and its patch
|
< 1 Hr. | 803 | PRO | |
|
|
PHP Snippet #06
This challenge covers the review of a snippet of code written in PHP
|
< 1 Hr. | 1894 | PRO | |
|
|
PHP Snippet #05
This challenge covers the review of a snippet of code written in PHP
|
< 1 Hr. | 1806 | PRO | |
|
|
PHP Snippet #04
This challenge covers the review of a snippet of code written in PHP
|
< 1 Hr. | 1898 | PRO | |
|
|
API 06
API
Angular
This exercise covers how one can inspect JavaScript code to identify unused endpoints.
|
< 1 Hr. | 2066 | PRO | |
|
|
Java Snippet #01
This challenge covers the review of a snippet of code written in Java
|
< 1 Hr. | 1909 | PRO | |
|
|
Java Snippet #02
This challenge covers the review of a snippet of code written in Java
|
< 1 Hr. | 1849 | PRO | |
|
|
Java Snippet #03
This challenge covers the review of a snippet of code written in Java
|
< 1 Hr. | 1706 | PRO | |
|
|
CVE-2021-37xxx
This challenge covers the review of a CVE and its patch
|
< 1 Hr. | 784 | PRO | |
|
|
PHP Snippet #01
This challenge covers the review of a snippet of code written in PHP
|
< 1 Hr. | 2564 | PRO | |
|
|
PHP Snippet #02
This challenge covers the review of a snippet of code written in PHP
|
< 1 Hr. | 2242 | PRO |
Showing 331–360 of 753 exercises
Free Labs of the Month