Exercises
| Exercise | Avg. Time | Difficulty | Solved by | Tier | |
|---|---|---|---|---|---|
|
API Mass-Assignment 02 | < 1 Hr. |  |
521 | PRO |
|
|
API Mass-Assignment 01 | < 1 Hr. | |
549 | PRO |
|
Mongo IDOR IV | < 1 Hr. |  |
178 | PRO |
|
|
Mongo IDOR III | < 1 Hr. | |
285 | PRO |
|
CVE-2024-X5X87
This challenge covers the review of a CVE in a go codebase and its patch
|
< 1 Hr. | |
119 | PRO |
|
|
API JWT REVOCATION
JWT
This exercise covers how to bypass a weak JWT Revocation Mechanism.
|
< 1 Hr. |  |
540 | PRO |
|
|
CVE-2022-XX975
This challenge covers the review of a CVE in a Go codebase and its patch
|
< 1 Hr. | |
124 | PRO |
|
|
Puzzle 07
Leverage a weak implementation of lowercase to access arbitrary files
|
1-2 Hr. | |
33 | PRO |
|
|
Puzzle 06
Leverage a weak implementation of lowercase to access arbitrary files
|
< 1 Hr. | |
34 | PRO |
|
|
API 18
This exercise covers how to exploit an authorization issue in an API.
|
< 1 Hr. | |
614 | PRO |
|
|
API 19
This exercise covers how to exploit an authorization issue in an API.
|
< 1 Hr. | |
602 | PRO |
|
|
API 20
This exercise covers how to exploit an authorization issue in an API.
|
< 1 Hr. | |
584 | PRO |
|
|
API 17
This exercise covers how to exploit an authorization issue in an API.
|
< 1 Hr. | |
524 | PRO |
|
|
API 16
This exercise covers how to exploit an authorization issue in an API.
|
< 1 Hr. | |
616 | PRO |
|
|
GraphQL Authorization 02
This exercise covers a simple authorization issue in a GraphQL application.
|
< 1 Hr. | |
493 | PRO |
|
|
GraphQL Authorization 01
This exercise covers a simple authorization issue in a GraphQL application.
|
< 1 Hr. | |
484 | PRO |
|
|
Golang Code Review #03
This challenge covers the review of a snippet of code written in Golang.
|
< 1 Hr. | |
187 | PRO |
|
|
Golang Code Review #01
This challenge covers the review of a snippet of code written in Golang.
|
< 1 Hr. | |
228 | PRO |
|
|
CVE-2022-2X8XX
This challenge covers the review of a CVE in a Golang codebase and its patch
|
< 1 Hr. | |
186 | PRO |
|
|
CVE-2022-X10X8
This challenge covers the review of a CVE in a Golang codebase and its patch
|
< 1 Hr. | |
167 | PRO |
|
|
CVE-2024-X90X6
This challenge covers the review of a CVE in a Golang codebase and its patch
|
< 1 Hr. | |
148 | PRO |
|
|
ORM LEAK: SQLite
This exercise covers how to exploit an ORM leak vulnerability
|
< 1 Hr. | |
188 | PRO |
|
|
CVE-2022-X87X
This challenge covers the review of a CVE in a Golang codebase and its patch
|
< 1 Hr. | |
143 | PRO |
|
|
CVE-2023-51XX2
This challenge covers the review of a CVE in a Golang codebase and its patch
|
< 1 Hr. | |
151 | PRO |
|
|
CVE-2024-2791X
This challenge covers the review of a CVE in a Golang codebase and its patch
|
< 1 Hr. | |
135 | PRO |
|
|
ORM LEAK 02
This exercise covers how to exploit an ORM leak vulnerability
|
< 1 Hr. | |
265 | PRO |
|
|
Puzzle 05
Authentication Bypass using an SQL injection without or 1=1
|
1-2 Hr. | |
43 | PRO |
|
|
CVE-2023-X5821
This challenge covers the review of a CVE in a Go codebase and its patch
|
< 1 Hr. | |
127 | PRO |
|
|
CVE-2024-X3X06
This challenge covers the review of a CVE in a Go codebase and its patch
|
< 1 Hr. | |
134 | PRO |
|
|
CVE-2022-2X24X
This challenge covers the review of a CVE in a Java codebase and its patch
|
< 1 Hr. | |
280 | PRO |
Showing 181–210 of 805 exercises
Free Labs of the Month
