Exercises
| Exercise | Avg. Time | Difficulty | Solved by | Tier | |
|---|---|---|---|---|---|
|
CVE-2026-XX977
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. |  |
91 | PRO |
|
|
CVE-2026-XX762
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
85 | PRO |
|
|
CVE-2026-XX130
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
87 | PRO |
|
|
CVE-2026-XX790
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
83 | PRO |
|
|
CVE-2023-51XX9
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
90 | PRO |
|
JWT: Refresh Token Bypass
This exercise covers bypassing JWT refresh token validation to maintain unauthorized access.
|
< 1 Hr. |  |
78 | PRO |
|
|
CVE-2026-21XX3
This challenge covers the review of a CVE in a Python codebase and its patch
|
< 1 Hr. | |
80 | PRO |
|
|
CVE-2023-3X829
This challenge covers the review of a CVE in a Python codebase and its patch
|
|
107 | PRO | |
|
|
CVE-2026-2413X
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
85 | PRO |
|
|
CVE-2024-X170X
This challenge covers the review of a CVE in a JavaScript codebase and its patch
|
|
139 | PRO | |
|
|
CVE-2025-X9X28
This challenge covers the review of a CVE in a typescript codebase and its patch
|
|
108 | PRO | |
|
|
CVE-2025-X23XX
This challenge covers the review of a CVE in a javascript codebase and its patch
|
|
113 | PRO | |
|
|
CVE-2026-XX871
This challenge covers the review of a CVE in a python codebase and its patch
|
|
119 | PRO | |
|
|
CVE-2026-XX951
This challenge covers the review of a CVE in a javascript codebase and its patch
|
|
113 | PRO | |
|
|
CVE-2025-XX953
This challenge covers the review of a CVE in a typescript codebase and its patch
|
|
126 | PRO | |
|
|
CVE-2025-625X8
This challenge covers the review of a CVE in a javascript codebase and its patch
|
|
148 | PRO | |
|
|
CVE-2026-X189X
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
129 | PRO |
|
|
CVE-2025-XX662
This challenge covers the review of a CVE in a python codebase and its patch
|
|
127 | PRO | |
|
|
JWT: Signature Leak
This exercise covers exploiting a JWT signature leak to forge authentication tokens.
|
< 1 Hr. | |
86 | PRO |
|
CVE-2026-24895: FrankenPHP Path Confusion RCE using Unicode | < 1 Hr. | |
28 | PRO |
|
|
JWT: Invalid Algorithm
This exercise covers exploiting JWT algorithm validation flaws to bypass signature verification.
|
< 1 Hr. | |
86 | PRO |
|
|
CVE-2026-XX050
This challenge covers the review of a CVE in a typescript codebase and its patch
|
|
108 | PRO | |
|
|
CVE-2025-XX864
This challenge covers the review of a CVE in a typescript codebase and its patch
|
< 1 Hr. | |
123 | PRO |
|
|
CVE-2026-XX888
This challenge covers the review of a CVE in a typescript codebase and its patch
|
|
119 | PRO | |
|
|
CVE-2021-X27X0
This challenge covers the review of a CVE in a JavaScript codebase and its patch
|
|
137 | PRO | |
|
|
CVE-2020-XX079
This challenge covers the review of a CVE in a javascript codebase and its patch
|
< 1 Hr. | |
198 | PRO |
|
|
CVE-2021-437XX
This challenge covers the review of a CVE in a JavaScript codebase and its patch
|
|
159 | PRO | |
|
|
CVE-2026-XXX50
This challenge covers the review of a CVE in a python codebase and its patch
|
|
116 | PRO | |
|
|
CVE-2024-XX3X9
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
100 | PRO |
|
|
CVE-2025-XXX57
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
139 | PRO |
Showing 151–180 of 851 exercises
Free Labs of the Month
