Web App Pentest
Beginner
Web Hacking Fundamentals
Bread-and-butter web bugs every pentester sees on day one. Recon, Burp basics, the 4 must-know vuln classes.
0/4 modules complete · 0%
- 1Hands-on Labeasy+25 XP
Reflected XSS Sandbox
A search endpoint reflects user input straight into the response HTML. Craft a payload that proves you can execute JS.
open lab - Hands-on Labeasy+25 XP
Classic UNION-based SQL Injection
A search endpoint glues user input straight into a SQL query. Extract the admin flag from the `secrets` table.
complete the module above first - Hands-on Labeasy+25 XP
Insecure Direct Object Reference
A profile endpoint trusts the `user_id` query param with no auth check. Read someone else's profile.
complete the module above first - Quiz+90 XP
Web Fundamentals Quiz
This quiz gates your progress through Web Hacking Fundamentals. You must demonstrate practical understanding of XSS, SQLi, IDOR, and essential tooling like Burp Suite.
complete the module above first
Sign in to track your progress.
sign in