Sign in Create Account

Exercises

Exercise Avg. Time Difficulty Solved by Tier
Ruby Snippet #05
This challenge covers the review of a snippet of code written in Ruby
 < 1 Hr. easy 1115 PRO
Ruby Snippet #06
This challenge covers the review of a snippet of code written in Ruby
 < 1 Hr. easy 1013 PRO
Ruby Snippet #07
This challenge covers the review of a snippet of code written in Ruby
 < 1 Hr. easy 872 PRO
Ruby Snippet #08
This challenge covers the review of a snippet of code written in Ruby
 < 1 Hr. easy 913 PRO
Ruby Snippet #09
This challenge covers the review of a snippet of code written in Ruby
 < 1 Hr. medium 867 PRO
HTTP 26
This challenge covers how to send specific HTTP requests
 < 1 Hr. easy 3303 PRO
HTTP 27
This challenge covers how to send specific HTTP requests
 < 1 Hr. medium 3225 PRO
HTTP 28
This challenge covers how to send specific HTTP requests
 < 1 Hr. medium 3218 PRO
HTTP 29
This challenge covers how to send specific HTTP requests
 < 1 Hr. medium 3124 PRO
HTTP 30
This challenge covers how to send specific HTTP requests
 < 1 Hr. hard 3164 PRO
CVE-2020-17xx7
This challenge covers the review of a CVE and its patch
 < 1 Hr. easy 1279 PRO
Ox Remote Code Execution
This exercise covers how you can gain code execution when an application is using Ox to deserialize data and is running on Ruby 2.3
 2-4 Hr. hard 93 PRO
CVE-2020-9x9x
This challenge covers the review of a CVE and its patch
 < 1 Hr. easy 1008 PRO
HTTP 21
This challenge covers how to send specific HTTP requests
 < 1 Hr. medium 3450 PRO
HTTP 22
This challenge covers how to send specific HTTP requests
 < 1 Hr. medium 3413 PRO
HTTP 23
This challenge covers how to send specific HTTP requests
 < 1 Hr. easy 3326 PRO
HTTP 24
This challenge covers how to send specific HTTP requests
 < 1 Hr. medium 3325 PRO
HTTP 25
This challenge covers how to send specific HTTP requests
 < 1 Hr. medium 3355 PRO
HTTP 16
This challenge covers how to send specific HTTP requests
 < 1 Hr. easy 3565 PRO
HTTP 20
This challenge covers how to send specific HTTP requests
 < 1 Hr. medium 3464 PRO
HTTP 18
This challenge covers how to send specific HTTP requests
 < 1 Hr. easy 3524 PRO
HTTP 19
This challenge covers how to send specific HTTP requests
 < 1 Hr. medium 3510 PRO
HTTP 17
This challenge covers how to send specific HTTP requests
 < 1 Hr. easy 3538 PRO
CVE-2020-17xx8
This challenge covers the review of a CVE and its patch
 < 1 Hr. easy 770 PRO
CVE-2021-22204: Exiftool RCE
This exercise covers how you can gain code execution when an application uses exiftool on user-controlled files
 1-2 Hr. hard 181 PRO
SSRF via FFMPEG II
This exercise covers how you can read arbitrary files when an application uses ffmpeg to render videos from a video you provide
 < 1 Hr. hard 135 PRO
API 03 API
This exercise is the API version of an exercise you already solved in another badge. You should use it to get more confident with discovering vulnerabilities without any hint on what to look for.
 < 1 Hr. easy 2540 PRO
CVE-2020-11xxx
This challenge covers the review of a CVE and its patch
 < 1 Hr. easy 790 PRO
OAuth2: Authorization Server XSS II
This exercise covers the exploitation of an XSS in an OAuth2 Authorization Server
 < 1 Hr. hard 289 PRO
HTTP 11
This challenge covers how to send specific HTTP requests
 < 1 Hr. easy 3838 PRO
‹ 1 … 11 12 13 14 15 16 17 … 26 ›
Showing 391–420 of 753 exercises