Exercises

Exercise Avg. Time Difficulty Solved by Tier
Python Snippet #08
This challenge covers the review of a snippet of code written in Python
< 1 Hr. easy 1706 PRO
Python Snippet #07
This challenge covers the review of a snippet of code written in Python
< 1 Hr. easy 1796 PRO
Mongo IDOR
This challenge covers how to exploit an IDOR when Mongo IDs are used
< 1 Hr. medium 1274 PRO
CVE-2005-2x8x
This challenge covers the review of a CVE and its patch
< 1 Hr. hard 706 PRO
CVE-2008-5x8x_ii
This challenge covers the review of a CVE and its patch
< 1 Hr. medium 702 PRO
Python Snippet #06
This challenge covers the review of a snippet of code written in Python
< 1 Hr. easy 1933 PRO
Java Snippet #06
This challenge covers the review of a snippet of code written in Java
< 1 Hr. medium 1484 PRO
Golang Snippet #01
This challenge covers the review of a snippet of code written in Golang
< 1 Hr. easy 1911 PRO
CVE-2022-21449 JWT
This exercise covers the exploitation of CVE-2022-21449 against a Java Application relying on JWT
< 1 Hr. medium 200 PRO
CVE-2021-33564 Argument Injection in Ruby Dragonfly
This exercise covers how you can get arbitrary file read using CVE-2021-33564 against Refinery CMS
< 1 Hr. medium 167 PRO
Mongo IDOR II
This challenge covers how to recover a Mongo ID to leverage an IDOR
< 1 Hr. medium 429 PRO
CVE-2021-45xx9
This challenge covers a vulnerable snippet in a real Python application
< 1 Hr. easy 841 PRO
PHP Snippet #09
This challenge covers the review of a snippet of code written in PHP
< 1 Hr. medium 1644 PRO
PHP Snippet #08
This challenge covers the review of a snippet of code written in PHP
< 1 Hr. hard 1745 PRO
PHP Snippet #07
This challenge covers the review of a snippet of code written in PHP
< 1 Hr. easy 1857 PRO
Python Snippet #05
This challenge covers the review of a snippet of code written in Python
< 1 Hr. easy 2043 PRO
Python Snippet #04
This challenge covers the review of a snippet of code written in Python
< 1 Hr. easy 1841 PRO
Python Snippet #03
This challenge covers the review of a snippet of code written in Python
< 1 Hr. easy 1996 PRO
CVE-2021-39x3x
This challenge covers the review of a CVE and its patch
< 1 Hr. easy 709 PRO
CVE-2022-21724: JDBC RCE PostgreSQL
This challenge covers how to gain code execution by leveraging a JDBC connection string with PostgreSQL
< 1 Hr. medium 221 PRO
Java Snippet #05
This challenge covers the review of a snippet of code written in Java
< 1 Hr. easy 1596 PRO
Java Snippet #04
This challenge covers the review of a snippet of code written in Java
< 1 Hr. easy 1769 PRO
Ox Remote Code Execution II
This exercise covers how you can gain code execution when an application is using Ox to deserialize data and is running on Ruby 2.7
1-2 Hr. hard 55 PRO
CVE-2009-3x8x
This challenge covers the review of a CVE and its patch
< 1 Hr. easy 862 PRO
HTTP 41
This challenge covers how to send specific HTTP requests
< 1 Hr. medium 2793 PRO
HTTP 42
This challenge covers how to send specific HTTP requests
< 1 Hr. medium 2820 PRO
HTTP 43
This challenge covers how to send specific HTTP requests
< 1 Hr. medium 2722 PRO
CVE-2021-381xx
This challenge covers the review of a CVE and its patch
< 1 Hr. medium 738 PRO
H2 RCE
This challenge covers how to gain code execution by leveraging an H2 database in a Java application
< 1 Hr. easy 163 PRO
TypeScript Snippet #07
This challenge covers the review of a snippet of code written in TypeScript
< 1 Hr. easy 1183 PRO
‹ 1 … 11 12 13 14 15 16 17 … 29 ›
Showing 391–420 of 851 exercises