Exercises
| Exercise | Avg. Time | Difficulty | Solved by | Tier | |
|---|---|---|---|---|---|
|
CVE-2025-6X5X7
This challenge covers the review of a CVE in a python codebase and its patch
|
 |
138 | PRO | |
|
|
CVE-2025-0X6X
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
183 | PRO |
|
|
CVE-2024-X68X
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
162 | PRO |
|
|
CVE-2023-2758X
This challenge covers the review of a CVE in a golang codebase and its patch
|
< 1 Hr. | |
93 | PRO |
|
|
CVE-2017-1XX74
This challenge covers the review of a CVE in a golang codebase and its patch
|
< 1 Hr. | |
123 | PRO |
|
|
CVE-202X-15X7
This challenge covers the review of a CVE in a golang codebase and its patch
|
< 1 Hr. | |
86 | PRO |
|
|
CVE-2022-2X457
This challenge covers the review of a CVE in a java codebase and its patch
|
< 1 Hr. | |
139 | PRO |
|
|
CVE-2025-627X0
This challenge covers the review of a CVE in a java codebase and its patch
|
< 1 Hr. | |
125 | PRO |
|
|
CVE-2025-NOID
This challenge covers the review of a CVE in a java codebase and its patch
|
< 1 Hr. | |
123 | PRO |
|
Latex: --shell-escape
This exercise covers how one can leverage latex when pdflatex is used with the --shell-escape option to gain command execution.
|
< 1 Hr. |  |
76 | PRO |
|
|
CVE-2025-X93X0
This challenge covers the review of a CVE in a golang codebase and its patch
|
< 1 Hr. | |
84 | PRO |
|
|
CVE-2025-X215X
This challenge covers the review of a CVE in a golang codebase and its patch
|
< 1 Hr. | |
92 | PRO |
|
|
Golang Code Review #07
This challenge covers the review of a snippet of code written in Golang.
|
< 1 Hr. | |
110 | PRO |
|
|
CVE-2025-6X85
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
152 | PRO |
|
|
CVE-2025-6X9X2
This challenge covers the review of a CVE in a python codebase and its patch
|
|
133 | PRO | |
|
|
CVE-2025-X942X
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
145 | PRO |
|
|
CVE-2025-X270X
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
163 | PRO |
|
|
Puzzle 08 | < 1 Hr. | |
35 | PRO |
|
|
CVE-2021-X5X8
This challenge covers the review of a CVE in a Golang codebase and its patch
|
< 1 Hr. | |
94 | PRO |
|
|
CVE-2025-5XX2X
This challenge covers the review of a CVE in a Golang codebase and its patch
|
< 1 Hr. | |
101 | PRO |
|
|
GCM Tag Truncation
This challenge covers the exploitation of tag truncation on GCM
|
2-4 Hr. | |
29 | PRO |
|
CVE-2022-24720
This exercise covers how one can leverage image processing in ActiveStorage to gain command execution.
|
1-2 Hr. | |
57 | PRO |
|
|
CVE-2025-XX149
This challenge covers the review of a CVE in a Python codebase and its patch
|
< 1 Hr. | |
194 | PRO |
|
|
CVE-2025-6XX4
This challenge covers the review of a CVE published in 2025 in a go codebase and its patch
|
< 1 Hr. | |
91 | PRO |
|
|
CVE-2025-5X3X9
This challenge covers the review of a CVE discovered in 2025 in a golang codebase and its patch
|
< 1 Hr. | |
110 | PRO |
|
|
CVE-2024-47081 | < 1 Hr. | |
34 | PRO |
|
|
CVE-2024-419XX
This challenge covers the review of a CVE in a Python codebase and its patch
|
< 1 Hr. | |
254 | PRO |
|
|
CVE-2023-3219X
This challenge covers the review of a CVE in a Golang project and its patch
|
< 1 Hr. | |
110 | PRO |
|
|
CVE-2025-4913X
This challenge covers the review of a CVE in a Go codebase and its patch. The goal is to review the code to find the security issue.
|
< 1 Hr. | |
104 | PRO |
|
|
CVE-2024-433XX
This challenge covers the review of a CVE in a Python codebase and its patch
|
< 1 Hr. | |
198 | PRO |
Showing 181–210 of 851 exercises
Free Labs of the Month
