Exercises
| Exercise | Avg. Time | Difficulty | Solved by | Tier | |
|---|---|---|---|---|---|
|
CVE-2017-1XX74
This challenge covers the review of a CVE in a golang codebase and its patch
|
-- |  |
99 | PRO |
|
|
CVE-2025-NOID
This challenge covers the review of a CVE in a java codebase and its patch
|
< 1 Hr. | |
102 | PRO |
|
|
CVE-2025-627X0
This challenge covers the review of a CVE in a java codebase and its patch
|
< 1 Hr. | |
105 | PRO |
|
|
CVE-2022-2X457
This challenge covers the review of a CVE in a java codebase and its patch
|
< 1 Hr. | |
116 | PRO |
|
Latex: --shell-escape
This exercise covers how one can leverage latex when pdflatex is used with the --shell-escape option to gain command execution.
|
< 1 Hr. |  |
59 | PRO |
|
|
Golang Code Review #07
This challenge covers the review of a snippet of code written in Golang.
|
-- | |
92 | PRO |
|
|
CVE-2025-X215X
This challenge covers the review of a CVE in a golang codebase and its patch
|
-- | |
75 | PRO |
|
|
CVE-2025-X93X0
This challenge covers the review of a CVE in a golang codebase and its patch
|
-- | |
68 | PRO |
|
|
CVE-2025-X942X
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
127 | PRO |
|
|
CVE-2025-6X85
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
134 | PRO |
|
|
CVE-2025-6X9X2
This challenge covers the review of a CVE in a python codebase and its patch
|
-- | |
117 | PRO |
|
|
CVE-2025-X270X
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
143 | PRO |
|
|
Puzzle 08 | < 1 Hr. | |
27 | PRO |
|
|
CVE-2021-X5X8
This challenge covers the review of a CVE in a Golang codebase and its patch
|
-- | |
71 | PRO |
|
|
CVE-2025-5XX2X
This challenge covers the review of a CVE in a Golang codebase and its patch
|
-- | |
85 | PRO |
|
|
GCM Tag Truncation
This challenge covers the exploitation of tag truncation on GCM
|
2-4 Hr. | |
22 | PRO |
|
CVE-2022-24720
This exercise covers how one can leverage image processing in ActiveStorage to gain command execution.
|
1-2 Hr. | |
41 | PRO |
|
|
CVE-2025-XX149
This challenge covers the review of a CVE in a Python codebase and its patch
|
< 1 Hr. | |
171 | PRO |
|
|
CVE-2025-6XX4
This challenge covers the review of a CVE published in 2025 in a go codebase and its patch
|
< 1 Hr. | |
75 | PRO |
|
|
CVE-2025-5X3X9
This challenge covers the review of a CVE discovered in 2025 in a golang codebase and its patch
|
-- | |
91 | PRO |
|
|
CVE-2024-47081 | < 1 Hr. | |
30 | PRO |
|
|
CVE-2024-433XX
This challenge covers the review of a CVE in a Python codebase and its patch
|
< 1 Hr. | |
177 | PRO |
|
|
CVE-2024-419XX
This challenge covers the review of a CVE in a Python codebase and its patch
|
< 1 Hr. | |
228 | PRO |
|
|
CVE-2025-4913X
This challenge covers the review of a CVE in a Go codebase and its patch. The goal is to review the code to find the security issue.
|
-- | |
87 | PRO |
|
|
CVE-2025-3X5X
This challenge covers the review of a CVE in a Golang project
|
< 1 Hr. | |
78 | PRO |
|
|
CVE-2023-3219X
This challenge covers the review of a CVE in a Golang project and its patch
|
-- | |
94 | PRO |
|
|
Golang Code Review #08
This challenge covers the review of a snippet of code written in Golang and has been created to help improve your security code review skills.
|
< 1 Hr. | |
119 | PRO |
|
|
Golang Code Review #06
This challenge covers the review of a vulnerable snippet of Golang and has been created to help improve your security code review skills.
|
< 1 Hr. | |
125 | PRO |
|
|
Golang Code Review #10
This challenge covers the review of a simple snippet of code written in Go.
|
< 1 Hr. | |
122 | PRO |
|
|
SAML: CVE-2025-25291
This exercise covers the exploitation of CVE-2025-25291 (impacting ruby-saml)
|
2-4 Hr. | |
21 | PRO |
Showing 91–120 of 756 exercises
Free Labs of the Month
