Practice real security concepts.

Safe mock scenario

Authentication intermediate

Broken Authentication

Comprehensive coverage of authentication vulnerabilities including weak credentials, session management flaws, and JW...

12 tasks 50 mins

Safe mock scenario

Web Security intermediate

Command Injection

Learn how unsafe system command construction leads to command injection and how to prevent it.

8 tasks 45 mins

Web Security beginner

Cross-Site Request Forgery

Learn CSRF attacks and defenses through focused security exercises.

7 tasks 45 mins

<script>

alert('XSS')

</script>

Web Security beginner

Cross-Site Scripting (XSS)

Find out how untrusted input can run as code in a browser, and how to stop it.

8 tasks 50 mins

Safe mock scenario

Web Security intermediate

File Upload Vulnerabilities

Explore critical file upload security flaws that allow attackers to upload malicious files and execute code on server...

7 tasks 50 mins

/profiles/42

Web Security beginner

Insecure Direct Object Reference

Learn how missing object-level authorization exposes other users' data.

5 tasks 45 mins

Safe mock scenario

Web Security beginner

Open Redirect

Understand how open redirect vulnerabilities enable phishing attacks and security bypasses. Learn to exploit redirect...

7 tasks 25 mins

' OR '1'='1'

Cyber Hygiene beginner

Passwords and Multi-Factor Authentication

Learn how unique passwords, password managers, and MFA reduce the impact of account attacks.

6 tasks 45 mins

' OR '1'='1'

Cyber Hygiene beginner

Phishing Awareness

Practice identifying suspicious messages and choosing a safe response before a scam captures your information.

6 tasks 45 mins

' OR '1'='1'

Cyber Hygiene beginner

Safe Browsing and Downloads

Practice safer decisions around websites, browser permissions, downloads, updates, and public networks.

6 tasks 45 mins

Safe mock scenario

Data Protection intermediate

Sensitive Data Exposure

Discover how applications inadvertently expose sensitive information through misconfigurations and poor security prac...

9 tasks 40 mins

Safe mock scenario

Web Security advanced

Server-Side Request Forgery (SSRF)

Advanced SSRF techniques to make servers request internal resources and cloud metadata services. Learn to bypass filt...

7 tasks 55 mins

' OR '1'='1'

Web Security beginner

SQL Injection

Learn SQL injection through interactive security exercises.

10 tasks 60 mins