Pick a Track. Learn Through Real Bugs.

Choose your stack. Each track mixes exploitation, code review, and real vulnerability patterns into a guided sequence.
Unlock PRO Access

Used by pentesters, AppSec engineers, and security teams who want to go beyond tools and checklists.

Choose Your Track

Start with the language or ecosystem you care about most.

🎯

Junior Pentester

62 exercises · 4 chapters

Build a solid foundation in web application security. Work through the core vulnerability classes every pentester needs to know.

XSS SQL Injection Authentication
> VIEW TRACK
🐍

Python for AppSec Engineers

37 exercises · 4 chapters

Explore common and subtle security issues in Python web applications through hands-on labs, code review exercises, and real implementation mistakes.

SSTI Pickle Django / Flask
> VIEW TRACK
⚡

JavaScript for AppSec Engineers

37 exercises · 4 chapters

Learn how security issues emerge in JavaScript applications, from web bugs and auth mistakes to code review and real CVE-inspired problems.

Prototype Pollution XSS Node.js
> VIEW TRACK
🔷

Go for AppSec Engineers

63 exercises · 4 chapters

Study how security bugs appear in Go applications through a combination of exploitation, code review, and exercises based on real implementation flaws.

Race Conditions JWT Crypto
> VIEW TRACK
☕

Java for AppSec Engineers

105 exercises · 4 chapters

Understand how common and advanced vulnerabilities show up in Java applications through labs that combine source code review, exploitation, and real bug patterns.

Deserialization Spring JNDI / Log4Shell
> VIEW TRACK
🧭

Browse All Exercises

Full catalogue

Already know what you want? Skip the tracks and browse the full exercise list by topic, difficulty, or type.

All Languages All Topics All Levels
> BROWSE FULL CATALOGUE

What Makes Tracks Work

A long list of exercises is useful once you know the platform. Tracks give you a clear starting point, a guided route, and faster momentum.

🎯 A Recommended Start

Every Track begins with a strong first exercise, ideally free, so you can start immediately instead of guessing where to begin.

🔀 A Mixed Route

Tracks combine code review, exploitation, and real vulnerability analysis to help you build a more complete understanding of the target ecosystem.

🐛 Real Bugs and Real Fixes

Tracks expose you to real implementation mistakes, real patches, and the kinds of bugs that keep appearing in production code.

📈 Less Guessing, More Progress

You do not need to browse dozens of exercises and hope you picked well. Tracks give you a recommended route and related badges mark your milestones.

Get Access to Every Track

PRO unlocks every exercise, every badge, and every video walkthrough across all tracks.

Unlock PRO Access