Exercises
| Exercise | Avg. Time | Difficulty | Solved by | Tier | |
|---|---|---|---|---|---|
|
CVE-2025-XX953
This challenge covers the review of a CVE in a typescript codebase and its patch
|
 |
116 | PRO | |
|
|
CVE-2026-XX871
This challenge covers the review of a CVE in a python codebase and its patch
|
|
106 | PRO | |
|
JWT: Signature Leak
This exercise covers exploiting a JWT signature leak to forge authentication tokens.
|
< 1 Hr. |  |
82 | PRO |
|
CVE-2026-24895: FrankenPHP Path Confusion RCE using Unicode | < 1 Hr. | |
26 | PRO |
|
|
JWT: Invalid Algorithm
This exercise covers exploiting JWT algorithm validation flaws to bypass signature verification.
|
< 1 Hr. | |
81 | PRO |
|
|
CVE-2025-XX864
This challenge covers the review of a CVE in a typescript codebase and its patch
|
< 1 Hr. | |
112 | PRO |
|
|
CVE-2026-XX888
This challenge covers the review of a CVE in a typescript codebase and its patch
|
|
109 | PRO | |
|
|
CVE-2026-XX050
This challenge covers the review of a CVE in a typescript codebase and its patch
|
|
99 | PRO | |
|
|
CVE-2021-437XX
This challenge covers the review of a CVE in a JavaScript codebase and its patch
|
|
145 | PRO | |
|
|
CVE-2021-X27X0
This challenge covers the review of a CVE in a JavaScript codebase and its patch
|
|
128 | PRO | |
|
|
CVE-2020-XX079
This challenge covers the review of a CVE in a javascript codebase and its patch
|
< 1 Hr. | |
182 | PRO |
|
|
CVE-2024-XX3X9
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
91 | PRO |
|
|
CVE-2026-XXX50
This challenge covers the review of a CVE in a python codebase and its patch
|
|
105 | PRO | |
|
|
CVE-2025-XXX57
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
123 | PRO |
|
|
CVE-2025-6X5X7
This challenge covers the review of a CVE in a python codebase and its patch
|
|
126 | PRO | |
|
|
CVE-2025-0X6X
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
168 | PRO |
|
|
CVE-2024-X68X
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
149 | PRO |
|
|
CVE-2023-2758X
This challenge covers the review of a CVE in a golang codebase and its patch
|
< 1 Hr. | |
86 | PRO |
|
|
CVE-202X-15X7
This challenge covers the review of a CVE in a golang codebase and its patch
|
< 1 Hr. | |
79 | PRO |
|
|
CVE-2017-1XX74
This challenge covers the review of a CVE in a golang codebase and its patch
|
< 1 Hr. | |
114 | PRO |
|
|
CVE-2025-627X0
This challenge covers the review of a CVE in a java codebase and its patch
|
< 1 Hr. | |
116 | PRO |
|
|
CVE-2025-NOID
This challenge covers the review of a CVE in a java codebase and its patch
|
< 1 Hr. | |
113 | PRO |
|
|
CVE-2022-2X457
This challenge covers the review of a CVE in a java codebase and its patch
|
< 1 Hr. | |
128 | PRO |
|
|
Latex: --shell-escape
This exercise covers how one can leverage latex when pdflatex is used with the --shell-escape option to gain command execution.
|
< 1 Hr. |  |
67 | PRO |
|
|
Golang Code Review #07
This challenge covers the review of a snippet of code written in Golang.
|
< 1 Hr. | |
101 | PRO |
|
|
CVE-2025-X215X
This challenge covers the review of a CVE in a golang codebase and its patch
|
< 1 Hr. | |
83 | PRO |
|
|
CVE-2025-X93X0
This challenge covers the review of a CVE in a golang codebase and its patch
|
< 1 Hr. | |
76 | PRO |
|
|
CVE-2025-X942X
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
138 | PRO |
|
|
CVE-2025-6X85
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
144 | PRO |
|
|
CVE-2025-6X9X2
This challenge covers the review of a CVE in a python codebase and its patch
|
|
126 | PRO |
Showing 121–150 of 805 exercises
Free Labs of the Month
