Exercises
| Exercise | Avg. Time | Difficulty | Solved by | Tier | |
|---|---|---|---|---|---|
|
|
Python Snippet #08
This challenge covers the review of a snippet of code written in Python
|
< 1 Hr. | 1706 | PRO | |
|
|
Python Snippet #07
This challenge covers the review of a snippet of code written in Python
|
< 1 Hr. | 1796 | PRO | |
|
|
Mongo IDOR
This challenge covers how to exploit an IDOR when Mongo IDs are used
|
< 1 Hr. | 1274 | PRO | |
|
|
CVE-2005-2x8x
This challenge covers the review of a CVE and its patch
|
< 1 Hr. | 706 | PRO | |
|
|
CVE-2008-5x8x_ii
This challenge covers the review of a CVE and its patch
|
< 1 Hr. | 702 | PRO | |
|
|
Python Snippet #06
This challenge covers the review of a snippet of code written in Python
|
< 1 Hr. | 1933 | PRO | |
|
|
Java Snippet #06
This challenge covers the review of a snippet of code written in Java
|
< 1 Hr. | 1484 | PRO | |
|
|
Golang Snippet #01
This challenge covers the review of a snippet of code written in Golang
|
< 1 Hr. | 1911 | PRO | |
|
|
CVE-2022-21449
JWT
This exercise covers the exploitation of CVE-2022-21449 against a Java Application relying on JWT
|
< 1 Hr. | 200 | PRO | |
|
|
CVE-2021-33564 Argument Injection in Ruby Dragonfly
This exercise covers how you can get arbitrary file read using CVE-2021-33564 against Refinery CMS
|
< 1 Hr. | 167 | PRO | |
|
|
Mongo IDOR II
This challenge covers how to recover a Mongo ID to leverage an IDOR
|
< 1 Hr. | 429 | PRO | |
|
|
CVE-2021-45xx9
This challenge covers a vulnerable snippet in a real Python application
|
< 1 Hr. | 841 | PRO | |
|
|
PHP Snippet #09
This challenge covers the review of a snippet of code written in PHP
|
< 1 Hr. | 1644 | PRO | |
|
|
PHP Snippet #08
This challenge covers the review of a snippet of code written in PHP
|
< 1 Hr. | 1745 | PRO | |
|
|
PHP Snippet #07
This challenge covers the review of a snippet of code written in PHP
|
< 1 Hr. | 1857 | PRO | |
|
|
Python Snippet #05
This challenge covers the review of a snippet of code written in Python
|
< 1 Hr. | 2043 | PRO | |
|
|
Python Snippet #04
This challenge covers the review of a snippet of code written in Python
|
< 1 Hr. | 1841 | PRO | |
|
|
Python Snippet #03
This challenge covers the review of a snippet of code written in Python
|
< 1 Hr. | 1996 | PRO | |
|
|
CVE-2021-39x3x
This challenge covers the review of a CVE and its patch
|
< 1 Hr. | 709 | PRO | |
|
|
CVE-2022-21724: JDBC RCE PostgreSQL
This challenge covers how to gain code execution by leveraging a JDBC connection string with PostgreSQL
|
< 1 Hr. | 221 | PRO | |
|
|
Java Snippet #05
This challenge covers the review of a snippet of code written in Java
|
< 1 Hr. | 1596 | PRO | |
|
|
Java Snippet #04
This challenge covers the review of a snippet of code written in Java
|
< 1 Hr. | 1769 | PRO | |
|
|
Ox Remote Code Execution II
This exercise covers how you can gain code execution when an application is using Ox to deserialize data and is running on Ruby 2.7
|
1-2 Hr. | 55 | PRO | |
|
|
CVE-2009-3x8x
This challenge covers the review of a CVE and its patch
|
< 1 Hr. | 862 | PRO | |
|
|
HTTP 41
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | 2793 | PRO | |
|
|
HTTP 42
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | 2820 | PRO | |
|
|
HTTP 43
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | 2722 | PRO | |
|
|
CVE-2021-381xx
This challenge covers the review of a CVE and its patch
|
< 1 Hr. | 738 | PRO | |
|
|
H2 RCE
This challenge covers how to gain code execution by leveraging an H2 database in a Java application
|
< 1 Hr. | 163 | PRO | |
|
|
TypeScript Snippet #07
This challenge covers the review of a snippet of code written in TypeScript
|
< 1 Hr. | 1183 | PRO |
Showing 391–420 of 851 exercises
Free Labs of the Month