|
Threat Modeling: OAuth / SSO Integration
|
|
 |
2 |
PRO |
|
|
Threat Modeling: Payment Processing
|
|
|
2 |
PRO |
|
|
Threat Modeling: Admin Dashboard
|
|
|
2 |
PRO |
|
|
Threat Modeling: Search Functionality
|
|
|
2 |
PRO |
|
|
Threat Modeling: Password Reset Flow
|
|
|
2 |
PRO |
|
|
Threat Modeling: File Upload Feature
|
|
|
2 |
PRO |
|
|
Threat Modeling: Social Media Platform
|
|
|
8 |
PRO |
|
|
Threat Modeling: SaaS Multi-tenant Platform
|
|
|
8 |
PRO |
|
|
Threat Modeling: IoT Smart Home Dashboard
|
|
|
8 |
PRO |
|
|
Threat Modeling: CI/CD Pipeline
|
|
|
7 |
PRO |
|
|
Threat Modeling: User Registration & Onboarding
|
|
|
9 |
PRO |
|
|
Threat Modeling: Mobile Banking App
|
|
|
8 |
PRO |
|
|
Threat Modeling: E-commerce Platform
|
|
|
15 |
PRO |
|
|
Java Serialize 13
This challenge covers TemplatesImpl bytecode injection to execute arbitrary code during deserialization.
|
|
|
9 |
PRO |
|
|
Threat Modeling: Online Banking Application
|
|
|
12 |
PRO |
|
|
Java Serialize 15
This capstone covers discovering a gadget chain yourself by analysing an unfamiliar library's classes, with no hints and deliberate red herrings.
|
|
|
7 |
PRO |
|
|
Threat Modeling: Healthcare Patient Portal
|
|
|
12 |
PRO |
|
|
Java Serialize 14
This challenge covers Property-Oriented Programming, chaining JavaBeans getters and setters across ordinary-looking classes into a code-execution gadget.
|
|
|
7 |
PRO |
|
|
Threat Modeling: The Rental Lockbox
|
|
|
13 |
PRO |
|
|
Pentest Process: Severity Triage
|
|
|
17 |
PRO |
|
|
Pentest Process: What Do You Do?
|
|
|
17 |
PRO |
|
|
Pentest Process: Fix This Finding
|
|
|
16 |
PRO |
|
|
Pentest Process: Debrief & Retest
|
|
|
16 |
PRO |
|
|
Pentest Process: The Readout
|
|
|
17 |
PRO |
|
|
Pentest Process: Executive Summaries
|
|
|
17 |
PRO |
|
|
Pentest Process: Impact and Remediation
|
|
|
17 |
PRO |
|
|
Pentest Process: Writing Finding Titles
|
|
|
22 |
PRO |
|
|
Pentest Process: The Engagement Goes Sideways
|
|
|
21 |
PRO |
|
|
Pentest Process: Severity and Risk Rating
|
|
|
19 |
PRO |
|
|
Pentest Process: Anatomy of a Report and a Finding
|
|
|
21 |
PRO |
