Penetration Testing, Security Code Review and Web App Security Exercises

Free PRO CVE Easy Medium Hard XSS Code Review API SSRF HTTP RECON CSRF SQLi

Exercise	Avg. Time	Solved by	Tier
API Payments 07 This exercise covers a way to manipulate a shopping cart to lower the total amount	< 1 Hr.	1052	PRO
CVE-2021-22204: Exiftool RCE II This exercise covers how you can gain code execution when an application uses exiftool on user-controlled files	< 1 Hr.	97	PRO
XSL PHP IV This exercise covers the exploitation of a PHP application using XSL	< 1 Hr.	174	PRO
API Payments 06 This exercise covers a simple payments bypass.	< 1 Hr.	1085	PRO
CVE-2022-39224 This exercise covers the exploitation of CVE-2022-39224	< 1 Hr.	121	PRO
XSL PHP III This exercise covers the exploitation of a PHP application using XSL	< 1 Hr.	194	PRO
DOMPDF RCE II This exercise covers the exploitation of a vulnerability in the DOMPDF library	< 1 Hr.	90	PRO
DOMPDF RCE This exercise covers the exploitation of a vulnerability in the DOMPDF library	< 1 Hr.	177	PRO
API Payments 05 This exercise covers how to abuse a shopping cart allowing users to apply a voucher.	< 1 Hr.	989	PRO
XSL PHP II This exercise covers the exploitation of a PHP application using XSL	< 1 Hr.	262	PRO
API Payments 04 This exercise covers how to abuse a shopping cart allowing users to apply a voucher..	< 1 Hr.	1307	PRO
XSL PHP This exercise covers the exploitation of a PHP application using XSL	< 1 Hr.	307	PRO
API Payments 03 This exercise covers a simple payments bypass.	< 1 Hr.	1422	PRO
CVE-2020-13xxx This challenge covers the review of a CVE and its patch	< 1 Hr.	736	PRO
Code Review 18 This exercise is one of our challenges to help you learn how to review real source code	< 1 Hr.	440	PRO
CVE-2008-5x8x This challenge covers the review of a CVE and its patch	< 1 Hr.	907	PRO
CVE-2022-3x7x1 This challenge covers the review of a CVE and its patch	< 1 Hr.	834	PRO
Python Snippet #02 This challenge covers the review of a snippet of code written in Python	< 1 Hr.	2179	PRO
Java Snippet #12 This challenge covers the review of a snippet of code written in Java	< 1 Hr.	1456	PRO
Java Snippet #11 This challenge covers the review of a snippet of code written in Java	< 1 Hr.	1499	PRO
Java Snippet #10 This challenge covers the review of a snippet of code written in Java	< 1 Hr.	1600	PRO
API Payments 02 This exercise covers a simple payments bypass.	< 1 Hr.	1592	PRO
GCM Nonce Reuse This challenge covers the impact of nonce reuse on GCM	< 1 Hr.	205	PRO
CVE-2019-5x2x This challenge covers the review of a CVE and its patch	< 1 Hr.	669	PRO
Java Snippet #07 This challenge covers the review of a snippet of code written in Java	< 1 Hr.	1831	PRO
Java Snippet #08 This challenge covers the review of a snippet of code written in Java	< 1 Hr.	1845	PRO
Java Snippet #09 This challenge covers the review of a snippet of code written in Java	< 1 Hr.	1462	PRO
API Payments 01 API This exercise covers a simple payments bypass.	< 1 Hr.	2087	PRO
CVE-2022-26xx9 This challenge covers a vulnerable snippet in a real Java application	< 1 Hr.	685	PRO
Python Snippet #09 This challenge covers the review of a snippet of code written in Python	< 1 Hr.	1955	PRO

‹ 1 … 10 11 12 13 14 15 16 … 29 ›

Showing 361–390 of 851 exercises