Sign in Create Account

Exercises

Exercise Avg. Time Difficulty Solved by Tier
Recon 26
In this challenge, you need to look for a key in the JavaScript used by the website
 < 1 Hr. medium 5445 FREE
SSRF via FFMPEG
This exercise covers how you can read arbitrary files when an application uses ffmpeg to render videos from a video you provide
 < 1 Hr. medium 271 PRO
SAML: Signature Wrapping II
This exercise covers how to use Signature Wrapping to become an arbitrary user
 < 1 Hr. hard 527 PRO
RCE via argument injection
This exercise covers a remote command execution vulnerability via argument injection
 < 1 Hr. hard 79 PRO
Code Review 16
This exercise is one of our challenges to help you learn how to review real source code
 < 1 Hr. easy 577 PRO
Code Review 17
This exercise is one of our challenges to help you learn how to review real source code
 < 1 Hr. medium 453 PRO
SAML: Signature Wrapping
This exercise covers how to use Signature Wrapping to become an arbitrary user
 < 1 Hr. hard 635 PRO
Recon 20
In this challenge, you need to look at the branches in repo3
 < 1 Hr. easy 5784 FREE
Recon 21
In this challenge, you need to look at the information in the branches for repo4
 < 1 Hr. easy 5656 FREE
Recon 22
In this challenge, you need to look in repo9 for deleted files
 < 1 Hr. medium 5428 FREE
Recon 23
In this challenge, you need to look for sensitive information in commit messages
 < 1 Hr. easy 5411 FREE
SAML: SAMLResponse forwarding
This exercise covers how to pass the SAMLResponse from one Service Provider to another
 < 1 Hr. medium 570 PRO
CGI and Signature
This exercise covers the exploitation of a vulnerable CGI.
 < 1 Hr. medium 258 PRO
Recon 17
In this challenge, you need to look at the name of the developer used in the repository test1
 < 1 Hr. medium 6173 FREE
Recon 18
In this challenge, you need to look at the public repository of the developers in the organisation
 < 1 Hr. medium 5848 FREE
Recon 19
In this challenge, you need to look at the email addresses used for commits in the repository repo7
 < 1 Hr. medium 5493 FREE
Code Review 15
This exercise is one of our challenges to help you learn how to review real source code
 < 1 Hr. medium 545 PRO
Code Review 14
This exercise is one of our challenges to help you learn how to review real source code
 < 1 Hr. medium 573 PRO
CVE-2020-14343: PyYAML unsafe loader
This exercise covers how you can gain code execution when an application use a vulnerable version of PyYAML and relies on load()
 < 1 Hr. medium 385 PRO
OAuth2: State Fixation
This exercise covers the exploitation of a state fixation in an OAuth2 Client
 < 1 Hr. medium 445 PRO
Code Review 13
This exercise is one of our challenges to help you learn how to review real source code
 < 1 Hr. hard 488 PRO
CVE-2020-7115: Aruba Clearpass RCE
This exercise covers a remote command execution issue on Aruba Clearpass RCE
 < 1 Hr. medium 246 PRO
Code Review 12
This exercise is one of our challenges to help you learn how to review real source code
 < 1 Hr. medium 612 PRO
OAuth2: Predictable State II
This exercise covers the exploitation of a predictable state in an OAuth2 Client
 < 1 Hr. hard 298 PRO
Recon 13
In this challenge, you need to find the TXT record linked to key.z.hackycorp.com
 < 1 Hr. easy 7208 FREE
Recon 14
In this challenge, you need to find a TXT record by doing a zone transfer on z.hackycorp.com
 < 1 Hr. easy 6492 FREE
Recon 15
In this challenge, you need to find a TXT record by doing a zone transfer on the internal zone "int"
 < 1 Hr. easy 5914 FREE
Recon 16
In this challenge, you need to find the version of Bind used
 < 1 Hr. medium 6061 FREE
EDDSA vulnerability in Monocypher Crypto
This exercise covers the exploitation of a vulnerability impacting Monocypher.
 < 1 Hr. medium 209 PRO
Code Review 11
This exercise is one of our challenges to help you learn how to review real source code
 < 1 Hr. hard 432 PRO
‹ 1 … 16 17 18 19 20 21 22 … 29 ›
Showing 541–570 of 851 exercises