Exercises
| Exercise | Avg. Time | Difficulty | Solved by | Tier | |
|---|---|---|---|---|---|
|
HTTP 17
This challenge covers how to send specific HTTP requests
|
< 1 Hr. |  |
3598 | PRO |
|
CVE-2020-17xx8
This challenge covers the review of a CVE and its patch
|
< 1 Hr. | |
811 | PRO |
|
CVE-2021-22204: Exiftool RCE
This exercise covers how you can gain code execution when an application uses exiftool on user-controlled files
|
< 1 Hr. |  |
192 | PRO |
|
SSRF via FFMPEG II
This exercise covers how you can read arbitrary files when an application uses ffmpeg to render videos from a video you provide
|
< 1 Hr. | |
146 | PRO |
|
API 03
API
This exercise is the API version of an exercise you already solved in another badge. You should use it to get more confident with discovering vulnerabilities without any hint on what to look for.
|
< 1 Hr. | |
2616 | PRO |
|
|
CVE-2020-11xxx
This challenge covers the review of a CVE and its patch
|
< 1 Hr. | |
832 | PRO |
|
OAuth2: Authorization Server XSS II
This exercise covers the exploitation of an XSS in an OAuth2 Authorization Server
|
< 1 Hr. | |
311 | PRO |
|
|
HTTP 11
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3921 | PRO |
|
|
HTTP 15
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3748 | PRO |
|
|
HTTP 12
This challenge covers how to send specific HTTP requests
|
< 1 Hr. |  |
3870 | PRO |
|
|
HTTP 13
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3780 | PRO |
|
|
HTTP 14
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3769 | PRO |
|
|
API 02
API
This exercise is the API version of an exercise you already solved in another badge. You should use it to get more confident with discovering vulnerabilities without any hint on what to look for.
|
< 1 Hr. | |
3291 | PRO |
|
Express Local File Read
This exercise covers how an insecure call to render can be used to gain local files read with Express
|
< 1 Hr. | |
470 | PRO |
|
|
OAuth2: Authorization Server XSS
This exercise covers the exploitation of an XSS in an OAuth2 Authorization Server
|
< 1 Hr. | |
431 | PRO |
|
|
HTTP 10
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
3996 | PRO |
|
|
HTTP 09
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
4120 | PRO |
|
|
HTTP 07
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
4203 | PRO |
|
|
HTTP 06
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
4313 | PRO |
|
|
HTTP 08
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
4187 | PRO |
|
|
HTTP 03
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
4682 | PRO |
|
|
HTTP 04
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
4510 | PRO |
|
|
HTTP 05
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
4414 | PRO |
|
|
HTTP 02
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
4923 | PRO |
|
|
HTTP 01
This challenge covers how to send specific HTTP requests
|
< 1 Hr. | |
5189 | PRO |
|
|
API 01
API
This exercise is the API version of an exercise you already solved in the Essential Badge. You should use it to get more confident with discovering vulnerabilities without any hint on what to look for.
|
< 1 Hr. | |
3824 | PRO |
|
|
JWT Algorithm Confusion with RSA Public Key Recovery
JWT
This exercise covers the exploitation of algorithm confusion when no public key is available
|
< 1 Hr. | |
255 | PRO |
|
|
SAML: Comment Injection II
This exercise covers the exploitation of a comment injection vulnerability in SAML
|
< 1 Hr. | |
689 | PRO |
|
Recon 24
In this challenge, you need to look for a file named key.txt in the place used to serve the assets for the main website
|
< 1 Hr. | |
5736 | FREE |
|
|
Recon 25
In this challenge, you need to look for a file named key2.txt in the place used to serve the assets for the main website
|
< 1 Hr. | |
3459 | FREE |
Showing 511–540 of 851 exercises
Free Labs of the Month
