Sign in Create Account
🎯

Junior Pentester

Work a penetration test end to end. Scope and authorize the engagement, map the target, exploit the core vulnerability classes from XSS and SQL injection to authentication flaws and SSRF, work the shell you land, read the code the bugs came from, then write the report that gets them fixed.

132 exercises
9 chapters ← All Tracks
Chapter 1
Recon & Target Mapping
Start where a real engagement starts. Map a target from the outside: exposed files, leaky error pages, hidden directories, virtual hosts, certificates and DNS.
1
Recon 00 Free
Exploitation
2
Recon 02 Free
Exploitation
3
Recon 01 Free
Exploitation
4
Recon 09 Free
Exploitation
5
Recon 03 Free
Exploitation
6
Recon 04 Free
Exploitation
7
Recon 05 Free
Exploitation
8
Recon 06 Free
Exploitation
9
Recon 07 Free
Exploitation
10
Recon 08 Free
Exploitation
11
Recon 11 Free
Exploitation
12
Recon 12 Free
Exploitation
13
Recon 13 Free
Exploitation
14
Recon 14 Free
Exploitation
15
Recon 15 Free
Exploitation
16
Recon 16 Free
Exploitation
Chapter 2
HTTP Essentials
Build every part of an HTTP request by hand, then bend it: methods, headers, cookies, bodies, duplicate parameters, encoding and path tricks.
17
HTTP 01 Pro
Exploitation
18
HTTP 02 Pro
Exploitation
19
HTTP 03 Pro
Exploitation
20
HTTP 04 Pro
Exploitation
21
HTTP 06 Pro
Exploitation
22
HTTP 09 Pro
Exploitation
23
HTTP 11 Pro
Exploitation
24
HTTP 12 Pro
Exploitation
25
HTTP 13 Pro
Exploitation
26
HTTP 21 Pro
Exploitation
27
HTTP 22 Pro
Exploitation
28
HTTP 23 Pro
Exploitation
29
HTTP 25 Pro
Exploitation
30
HTTP 26 Pro
Exploitation
Recommended: Complete Chapter 1 first
Chapter 3
Cross-Site Scripting
Learn to find and exploit XSS vulnerabilities, from basic reflected and stored XSS to filter bypasses and DOM-based attacks.
31
XSS 01 Pro
Exploitation
32
XSS 02 Pro
Exploitation
33
XSS 03 Pro
Exploitation
34
XSS 04 Pro
Exploitation
35
XSS 05 Pro
Exploitation
36
XSS 06 Pro
Exploitation
37
XSS 07 Pro
Exploitation
38
XSS 08 Pro
Exploitation
39
XSS 09 Pro
Exploitation
40
XSS 10 Pro
Exploitation
Recommended: Complete Chapters 1 & 2 first
Chapter 4
Injection & Execution
Exploit SQL injection, command injection, code execution, LDAP injection, NoSQL injection, server-side template injection, and file inclusion vulnerabilities.
41
SQL Injection 01 Pro
Exploitation
42
SQL Injection 02 Pro
Exploitation
43
SQL Injection 03 Pro
Exploitation
44
SQL Injection 04 Pro
Exploitation
45
SQL Injection 05 Pro
Exploitation
46
SQL Injection 06 Pro
Exploitation
47
Command Execution 01 Pro
Exploitation
48
Command Execution 02 Pro
Exploitation
49
Command Execution 03 Pro
Exploitation
50
Code Execution 01 Pro
Exploitation
51
Code Execution 02 Pro
Exploitation
52
Code Execution 03 Pro
Exploitation
53
Code Execution 04 Pro
Exploitation
54
Code Execution 05 Pro
Exploitation
55
Code Execution 06 Pro
Exploitation
56
Code Execution 07 Pro
Exploitation
57
Code Execution 08 Pro
Exploitation
58
Code Execution 09 Pro
Exploitation
59
LDAP 01 Pro
Exploitation
60
LDAP 02 Pro
Exploitation
61
MongoDB Injection 01 Pro
Exploitation
62
MongoDB Injection 02 Pro
Exploitation
63
Server Side Template Injection 01 Pro
Exploitation
64
Server Side Template Injection 02 Pro
Exploitation
65
File Include 01 Pro
Exploitation
66
File Include 02 Pro
Exploitation
Recommended: Complete all previous chapters
Chapter 5
Unix for Post-Exploitation
You have a shell. Now find your way around it: permissions, shell history, dotfiles, environment variables, application config and the first look at privilege escalation.
67
Unix 00 Pro
Exploitation
68
Unix 01 Pro
Exploitation
69
Unix 02 Pro
Exploitation
70
Unix 03 Pro
Exploitation
71
Unix 05 Pro
Exploitation
72
Unix 06 Pro
Exploitation
73
Unix 09 Pro
Exploitation
74
Unix 23 Pro
Exploitation
75
Unix 25 Pro
Exploitation
Recommended: Complete all previous chapters
Chapter 6
Files, Paths & Server-Side Requests
Exploit directory traversal, file upload, XML external entities, open redirects, and server-side request forgery vulnerabilities.
76
Directory Traversal 01 Pro
Exploitation
77
Directory Traversal 02 Pro
Exploitation
78
Directory Traversal 03 Pro
Exploitation
79
File Upload 01 Pro
Exploitation
80
File Upload 02 Pro
Exploitation
81
XML Attacks 01 Pro
Exploitation
82
XML Attacks 02 Pro
Exploitation
83
Open Redirect 01 Pro
Exploitation
84
Open Redirect 02 Pro
Exploitation
85
Server Side Request Forgery 01 Pro
Exploitation
86
Server Side Request Forgery 02 Pro
Exploitation
87
Server Side Request Forgery 03 Pro
Exploitation
88
Server Side Request Forgery 04 Pro
Exploitation
Recommended: Complete all previous chapters
Chapter 7
Authentication, Authorization & JWT
Identify and exploit authentication bypass, broken access controls, insecure direct object references, and JWT implementation flaws.
89
Authentication 01 Pro
Exploitation
90
Authentication 02 Pro
Exploitation
91
Authentication 03 Pro
Exploitation
92
Authentication 04 Pro
Exploitation
93
Authentication 05 Pro
Exploitation
94
Authorization 01 Pro
Exploitation
95
Authorization 02 Pro
Exploitation
96
Authorization 03 Pro
Exploitation
97
Authorization 04 Pro
Exploitation
98
Authorization 05 Pro
Exploitation
99
Authorization 06 Pro
Exploitation
100
JWT VII Pro
Exploitation
101
JSON Web Token None Algorithm Pro
Exploitation
Recommended: Complete all previous chapters
Chapter 8
Code Review
Read the code the bugs came from. The same vulnerability classes you just exploited, as snippets in PHP, Python, JavaScript, Java and Go, and a way into the language tracks and the Code Review badge.
102
PHP Snippet #06 Pro
Code Review · Cross-Site Scripting
103
Python Snippet #05 Pro
Code Review · SQL Injection
104
Javascript Snippet #07 Pro
Code Review · SQL Injection
105
Python Snippet #09 Pro
Code Review · Command Execution
106
Javascript Snippet #06 Pro
Code Review · Server-Side Template Injection
107
PHP Snippet #01 Pro
Code Review · Directory Traversal
108
PHP Snippet #02 Pro
Code Review · Filter Bypass
109
Python Snippet #02 Pro
Code Review · Server-Side Request Forgery
110
Java Snippet #12 Pro
Code Review · Validation not applied to only the Hostname
111
Golang Snippet #05 Pro
Code Review · Broken Authentication
112
PHP Snippet #03 Pro
Code Review · Filter Bypass
Recommended: Complete all previous chapters
Chapter 9
The Pentest Process
The job around the hacking. Follow one engagement from the first email to the final retest: scoping, rules of engagement and authorization, kickoff, methodology and evidence, severity and impact, the report and executive summary, then the debrief and readout.
113
Pentest Process: Introduction Pro
Quiz
114
Pentest Process: Choosing the Right Engagement Pro
Quiz
115
Pentest Process: Scoping Pro
Quiz
116
Pentest Process: Rules of Engagement & Authorization Pro
Quiz
117
Pentest Process: Kickoff & Setup Pro
Quiz
118
Pentest Process: Methodology & Coverage Pro
Quiz
119
Pentest Process: Testing Different Target Types Pro
Quiz
120
Pentest Process: Notes & Evidence Pro
Quiz
121
Pentest Process: Communication During the Engagement Pro
Quiz
122
Pentest Process: The Engagement Goes Sideways Pro
Quiz
123
Pentest Process: Anatomy of a Report and a Finding Pro
Quiz
124
Pentest Process: Writing Finding Titles Pro
Quiz
125
Pentest Process: Severity and Risk Rating Pro
Quiz
126
Pentest Process: Impact and Remediation Pro
Quiz
127
Pentest Process: Executive Summaries Pro
Quiz
128
Pentest Process: Fix This Finding Pro
Quiz
129
Pentest Process: Severity Triage Pro
Quiz
130
Pentest Process: Debrief & Retest Pro
Quiz
131
Pentest Process: The Readout Pro
Quiz
132
Pentest Process: What Do You Do? Pro
Quiz
No prerequisites: you can start this chapter on day one