Exercises
| Exercise | Avg. Time | Difficulty | Solved by | Tier | |
|---|---|---|---|---|---|
|
CVE-2024-419XX
This challenge covers the review of a CVE in a Python codebase and its patch
|
< 1 Hr. |  |
254 | PRO |
|
|
Golang Code Review #08
This challenge covers the review of a snippet of code written in Golang and has been created to help improve your security code review skills.
|
< 1 Hr. | |
134 | PRO |
|
|
Golang Code Review #10
This challenge covers the review of a simple snippet of code written in Go.
|
< 1 Hr. | |
138 | PRO |
|
|
Golang Code Review #06
This challenge covers the review of a vulnerable snippet of Golang and has been created to help improve your security code review skills.
|
< 1 Hr. | |
142 | PRO |
|
SAML: CVE-2025-25291
This exercise covers the exploitation of CVE-2025-25291 (impacting ruby-saml)
|
2-4 Hr. | |
28 | PRO |
|
|
SAML: CVE-2025-29775 Signed Metadata
This exercise covers the exploitation of CVE-2025-29775 (impacting xml-crypto) without XMLResponse
|
2-4 Hr. | |
23 | PRO |
|
|
CVE-2024-6X3X
This challenge covers the review of a CVE (original vulnerable code and diff) of a real go codebase
|
< 1 Hr. | |
109 | PRO |
|
|
CVE-2019-379X
This challenge is part of our golang code review challenges designed to teach you security code review by reviewing patches
|
< 1 Hr. | |
173 | PRO |
|
|
CVE-2019-X03X
This challenge covers the review of a CVE in a golang codebase and its patch
|
< 1 Hr. | |
115 | PRO |
|
|
CVE-2025-XX95X
This challenge is part of our go code review challenges designed to teach you security code review by reviewing patches
|
< 1 Hr. | |
118 | PRO |
|
|
SAML: CVE-2025-29775
This exercise covers the exploitation of CVE-2025-29775 (impacting xml-crypto)
|
1-2 Hr. | |
31 | PRO |
|
|
CVE-2022-37X1
This challenge covers the review of a CVE in a go codebase and its patch
|
< 1 Hr. | |
128 | PRO |
|
UUIDv1 IDOR | < 1 Hr. |  |
265 | PRO |
|
|
CVE-2023-XX463
This challenge covers the review of a CVE in a Go codebase and its patch
|
< 1 Hr. | |
122 | PRO |
|
|
Golang Code Review #04
This challenge covers the review of a snippet of code written in Golang.
|
< 1 Hr. | |
165 | PRO |
|
API Mass-Assignment 03 | < 1 Hr. | |
515 | PRO |
|
|
API Mass-Assignment 02 | < 1 Hr. | |
547 | PRO |
|
|
API Mass-Assignment 01 | < 1 Hr. | |
574 | PRO |
|
|
Mongo IDOR IV | < 1 Hr. | |
193 | PRO |
|
|
Mongo IDOR III | < 1 Hr. | |
303 | PRO |
|
|
CVE-2024-X5X87
This challenge covers the review of a CVE in a go codebase and its patch
|
< 1 Hr. | |
126 | PRO |
|
|
API JWT REVOCATION
JWT
This exercise covers how to bypass a weak JWT Revocation Mechanism.
|
< 1 Hr. |  |
568 | PRO |
|
|
CVE-2022-XX975
This challenge covers the review of a CVE in a Go codebase and its patch
|
< 1 Hr. | |
131 | PRO |
|
|
Puzzle 06
Leverage a weak implementation of lowercase to access arbitrary files
|
< 1 Hr. | |
35 | PRO |
|
|
Puzzle 07
Leverage a weak implementation of lowercase to access arbitrary files
|
1-2 Hr. | |
34 | PRO |
|
|
API 18
This exercise covers how to exploit an authorization issue in an API.
|
< 1 Hr. | |
635 | PRO |
|
|
API 19
This exercise covers how to exploit an authorization issue in an API.
|
< 1 Hr. | |
623 | PRO |
|
|
API 20
This exercise covers how to exploit an authorization issue in an API.
|
< 1 Hr. | |
605 | PRO |
|
|
API 16
This exercise covers how to exploit an authorization issue in an API.
|
< 1 Hr. | |
638 | PRO |
|
|
API 17
This exercise covers how to exploit an authorization issue in an API.
|
< 1 Hr. | |
545 | PRO |
Showing 211–240 of 851 exercises
Free Labs of the Month
