Sign in Create Account

Exercises

Exercise Avg. Time Difficulty Solved by Tier
From SQL injection to Shell III: PostgreSQL Edition SQL Injection
This exercise covers how to gain access to an administration interface using a SQL injection, and how to get command execution using Ghostscript
 < 1 Hr. medium 282 PRO
OAuth2: Client CSRF II
This exercise covers the exploitation of a CSRF in an OAuth2 Client
 1-2 Hr. medium 525 PRO
XSS Include XSS
This exercise covers how to use Cross-Site-Scripting Include to leak information
 < 1 Hr. easy 1412 PRO
OAuth2: Client CSRF
This exercise covers the exploitation of a CSRF in an OAuth2 Client
 < 1 Hr. medium 1014 PRO
Code Review 05
This exercise is one of our challenges to help you learn how to review real source code
 < 1 Hr. hard 496 PRO
Code Review 04
This exercise is one of our challenges to help you learn how to review real source code
 < 1 Hr. hard 620 PRO
JS Prototype Pollution
This exercise covers how to exploit Prototype Pollution against a JavaScript application
 < 1 Hr. easy 999 PRO
OAuth2: Authorization Server CSRF
This exercise covers the exploitation of a CSRF in an OAuth2 Authorization Server
 1-2 Hr. easy 1214 PRO
Code Review 03
This exercise is one of our challenges to help you learn how to review real source code
 < 1 Hr. hard 538 PRO
SSRF in PDF generation
This exercise covers how you can read arbitrary files when an application generates pdfs from provided links
 < 1 Hr. easy 945 PRO
OAuth2: Github HTTP HEAD
This exercise covers the exploitation of the HTTP HEAD issue impacting Github in 2019
 < 1 Hr. hard 488 PRO
SVG XSS
This exercise covers how to use an SVG to trigger a Cross-Site-Scripting
 < 1 Hr. medium 1927 PRO
Apache Pluto RCE
This exercise covers how to gain code execution on Apache Pluto 3.0.0 due to a flaw in the authorization logic
 < 1 Hr. medium 579 PRO
JSON Cross-Site Request Forgery
This exercise details the exploitation of a Cross-Site Request Forgery when JSON is used
 < 1 Hr. medium 1545 PRO
Cross-Site Request Forgery
This exercise details the exploitation of a Cross-Site Request Forgery to gain access to sensitive data
 < 1 Hr. medium 1585 PRO
Code Review 02
This exercise is one of our challenges to help you learn how to review real source code
 < 1 Hr. medium 721 PRO
postMessage() IV
This exercise covers how insecure calls to the JavaScript function postMessage() can be used to leak sensitive information when a listener does not filter the Origin and X-Frame-Options is used
 < 1 Hr. medium 1022 PRO
Code Review 01
This exercise is one of our challenges to help you learn how to review real source code
 < 1 Hr. medium 986 PRO
Spring Actuators
This exercise covers how you can gain code execution using Spring Actuators when Spring Cloud is used.
 < 1 Hr. medium 319 PRO
postMessage() III
This exercise covers how insecure calls to the JavaScript function postMessage() can be used to trigger a Cross-Site Scripting
 < 1 Hr. medium 1039 PRO
postMessage() II
This exercise covers how insecure calls to the JavaScript function postMessage() can be used to leak sensitive information when a listener does not filter the Origin
 < 1 Hr. medium 1155 PRO
PHP phar://
This exercise covers how the PHP phar:// handler can be used to gain code execution using PHP unserialize.
 < 1 Hr. medium 383 PRO
Signing Oracle
This exercise covers how a signing oracle can be used to bypass authorization in place
 < 1 Hr. easy 876 PRO
Length Extension Attack
This exercise covers how to use a length extension attack to exploit a directory traversal vulnerability
 < 1 Hr. hard 804 PRO
JSON Web Encryption
This exercise covers how you can create your own JWE if you have access to the public key used by the server
 < 1 Hr. medium 570 PRO
postMessage()
This exercise covers how insecure calls to the JavaScript function postMessage() can be used to leak sensitive information
 < 1 Hr. medium 1324 PRO
CVE-2019-5418
This exercise details the exploitation of CVE-2019-5418 to get code execution
 < 1 Hr. hard 536 PRO
Cross-Site WebSocket Hijacking
This exercise covers Cross-Site WebSocket Hijacking and how it can be used to gain access to sensitive information
 < 1 Hr. medium 1148 PRO
JWT XII JWT
This exercise covers how to use the x5u header to bypass an authentication based on JWT.
 < 1 Hr. hard 729 PRO
Cross-Origin Resource Sharing II
This exercise covers Cross-Origin Resource Sharing and how it can be used to get access to sensitive data.
 < 1 Hr. medium 1099 PRO
‹ 1 … 18 19 20 21 22 23 24 … 29 ›
Showing 601–630 of 851 exercises