Exercises
| Exercise | Avg. Time | Difficulty | Solved by | Tier | |
|---|---|---|---|---|---|
|
HTTP 29
This challenge covers how to send specific HTTP requests
|
< 1 Hr. |  |
3157 | PRO |
|
|
HTTP 30
This challenge covers how to send specific HTTP requests
|
< 1 Hr. |  |
3196 | PRO |
|
CVE-2020-17xx7
This challenge covers the review of a CVE and its patch
|
< 1 Hr. |  |
1319 | PRO |
|
Ox Remote Code Execution
This exercise covers how you can gain code execution when an application is using Ox to deserialize data and is running on Ruby 2.3
|
< 1 Hr. | |
101 | PRO |
|
|
CVE-2020-9x9x
This challenge covers the review of a CVE and its patch
|
< 1 Hr. | |
1042 | PRO |
|
|
HTTP 21
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3487 | PRO |
|
|
HTTP 22
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3450 | PRO |
|
|
HTTP 23
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3363 | PRO |
|
|
HTTP 24
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3361 | PRO |
|
|
HTTP 25
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3392 | PRO |
|
|
HTTP 16
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3599 | PRO |
|
|
HTTP 20
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3502 | PRO |
|
|
HTTP 18
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3559 | PRO |
|
|
HTTP 19
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3547 | PRO |
|
|
HTTP 17
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3572 | PRO |
|
|
CVE-2020-17xx8
This challenge covers the review of a CVE and its patch
|
< 1 Hr. | |
800 | PRO |
|
CVE-2021-22204: Exiftool RCE
This exercise covers how you can gain code execution when an application uses exiftool on user-controlled files
|
< 1 Hr. | |
186 | PRO |
|
SSRF via FFMPEG II
This exercise covers how you can read arbitrary files when an application uses ffmpeg to render videos from a video you provide
|
< 1 Hr. | |
139 | PRO |
|
API 03
API
This exercise is the API version of an exercise you already solved in another badge. You should use it to get more confident with discovering vulnerabilities without any hint on what to look for.
|
< 1 Hr. | |
2589 | PRO |
|
|
CVE-2020-11xxx
This challenge covers the review of a CVE and its patch
|
< 1 Hr. | |
819 | PRO |
|
OAuth2: Authorization Server XSS II
This exercise covers the exploitation of an XSS in an OAuth2 Authorization Server
|
< 1 Hr. | |
303 | PRO |
|
|
HTTP 11
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3875 | PRO |
|
|
HTTP 15
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3722 | PRO |
|
|
HTTP 12
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3826 | PRO |
|
|
HTTP 13
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3736 | PRO |
|
|
HTTP 14
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3742 | PRO |
|
|
API 02
API
This exercise is the API version of an exercise you already solved in another badge. You should use it to get more confident with discovering vulnerabilities without any hint on what to look for.
|
< 1 Hr. | |
3262 | PRO |
|
|
Express Local File Read
This exercise covers how an insecure call to render can be used to gain local files read with Express
|
< 1 Hr. | |
464 | PRO |
|
|
OAuth2: Authorization Server XSS
This exercise covers the exploitation of an XSS in an OAuth2 Authorization Server
|
< 1 Hr. | |
424 | PRO |
|
|
HTTP 10
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3961 | PRO |
Showing 451–480 of 805 exercises
Free Labs of the Month
