Exercises
| Exercise | Avg. Time | Difficulty | Solved by | Tier | |
|---|---|---|---|---|---|
|
OAuth2: Predictable State
This exercise covers the exploitation of a predictable state in an OAuth2 Client
|
< 1 Hr. |  |
323 | PRO |
|
Code Review 10
This exercise is one of our challenges to help you learn how to review real source code
|
< 1 Hr. |  |
533 | PRO |
|
Recon 11 | < 1 Hr. |  |
6628 | FREE |
|
|
Recon 12 | < 1 Hr. | |
7180 | FREE |
|
|
Unicode and NFKC
This exercise covers how to leverage unicode to exploit a directory traversal
|
< 1 Hr. | |
348 | PRO |
|
|
SAML: Trusted Embedded Key
This exercise covers the exploitation of a Service Provider (SP) that doesn't check the certificate provided in the SAMLResponse
|
< 1 Hr. | |
566 | PRO |
|
|
Recon 06
This exercise covers default vhost
|
< 1 Hr. | |
12819 | FREE |
|
|
Recon 07
This exercise covers default TLS vhost
|
< 1 Hr. | |
11678 | FREE |
|
|
Recon 08
This exercise covers aliases in TLS certificates
|
< 1 Hr. | |
10613 | FREE |
|
|
Recon 09 | < 1 Hr. | |
11253 | FREE |
|
CVE-2020-8163: Rails local name RCE
This exercise details the exploitation of CVE-2020-8163 to gain code execution
|
< 1 Hr. | |
246 | PRO |
|
|
SAML: Known Key
This exercise covers the exploitation of a known key in SAML
|
< 1 Hr. | |
579 | PRO |
|
|
Code Review 09
This exercise is one of our challenges to help you learn how to review real source code
|
< 1 Hr. | |
475 | PRO |
|
|
Recon 04
This exercise covers common interesting directories
|
< 1 Hr. | |
18121 | FREE |
|
|
Recon 05
This exercise covers simple directory bruteforcing
|
< 1 Hr. | |
13229 | FREE |
|
|
Recon 01
This exercise covers 404 error pages
|
< 1 Hr. | |
23722 | FREE |
|
OAuth2: Client Server XSS
This exercise covers the exploitation of a Cross-Site Scripting in an OAuth2 Client and Server
|
< 1 Hr. | |
404 | PRO |
|
|
Zip symlink
This exercise covers how you can create a malicious Zip file and use it to gain access to sensitive files.
|
< 1 Hr. | |
624 | PRO |
|
|
Code Review 08
This exercise is one of our challenges to help you learn how to review real source code
|
< 1 Hr. | |
586 | PRO |
|
|
SAML: Comment Injection
This exercise covers the exploitation of a comment injection vulnerability in SAML
|
< 1 Hr. | |
1827 | PRO |
|
|
Unicode and Downcase
This exercise covers how you can use unicode to gain access to an admin account.
|
< 1 Hr. | |
630 | PRO |
|
|
Code Review 07
This exercise is one of our challenges to help you learn how to review real source code
|
< 1 Hr. | |
496 | PRO |
|
|
Recon 10
This exercise covers visual content discovery
|
< 1 Hr. | |
7196 | FREE |
|
|
Recon 00
This exercise covers the robots.txt file
|
< 1 Hr. | |
23788 | FREE |
|
|
Recon 02
This exercise covers the security.txt file
|
< 1 Hr. | |
20093 | FREE |
|
|
Recon 03
This exercise covers directory listing
|
< 1 Hr. | |
17974 | FREE |
|
|
Java Serialize 01
This exercise is one of our challenges to help you learn Java Serialisation exploitation
|
< 1 Hr. | |
478 | PRO |
|
|
Unicode and Uppercase
This exercise covers how you can use unicode to gain access to an admin account.
|
< 1 Hr. | |
708 | PRO |
|
|
Code Review 06
This exercise is one of our challenges to help you learn how to review real source code
|
< 1 Hr. | |
439 | PRO |
|
|
Cross-Site Leak
This exercise covers how to use Cross-Site Leak to recover sensitive information
|
1-2 Hr. | |
607 | PRO |
Showing 571–600 of 851 exercises
Free Labs of the Month
