Exercises

This exercise details how to tamper with data encrypted using CBC

This exercise covers a Remote Code Execution in Struts 2.

This exercise covers a remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data

This exercise explains how you can exploit a vulnerability published in 2014 in Gitlist.

This exercise covers the exploitation of a weakness in the usage of ECDSA

This challenge was written for Ruxcon CTF 2015 and cover the Debug mode of Werkzeug/Flask

This exercise covers an attack against CBC mode. This attack can be used to decrypt data and re-encrypt arbitrary data

This challenge was written for Ruxcon CTF 2015. It's an SQL injection mixed with a remote code execution.

This exercise is a challenge written for Nullcon CTF in 2015

This challenge was written for Ruxcon CTF 2015. It's an SQL injection with a twist

This exercise will guide you through the process of scoring on an exercise to get it marked as completed

This exercise will guide through the process of scoring an exercise to mark it as completed

This exercise will guide through the process of scoring an exercise to mark it as completed. Finding the key is just a little bit harder than the previous exercise.

This exercise will guide through the process of scoring an exercise to mark it as completed. However, this time, you will run commands on the underlying operating system. You will need to run the score command with your UUID.

This exercise covers the exploitation of a code execution in Ruby-on-Rails using XML and YAML.

This exercise covers the exploitation of an issue with some implementations of JWT

This exercise covers the exploitation of an Xstream vulnerability in Jenkins

This exercise covers the exploitation of a call to readObject in a Spring application

This exercise covers the exploitation of an application using XMLDecoder

This exercise covers how to intercept an HTTPs connection

This exercise covers how to intercept an HTTPs connection

This exercise covers how to intercept an HTTPs connection with hostname verification.

This exercise covers how to intercept an HTTPs connection.

This exercise covers how to intercept an HTTP connection.

This exercise covers how to get code execution when a Struts application is running in devMode

This exercise covers the exploitation of a signature weakness in a JWT library.

This exercise covers Cross-Origin Resource Sharing and how it can be used to bypass CSRF protection if it's misconfigured

This exercise covers the exploitation of PHP type confusion to bypass a signature and the exploitation of unserialize.

This exercise covers the exploitation of Python's pickle when used to deserialize untrusted data

This exercise covers the exploitation of XML entities in the Play framework