This section contains labs of the WAP Challenges course on Pentester Academy. We would highly recommend following the course and then attempting the labs below to better understand the objective of this section.

Section Introduction and Challenge 1

Challenge 2: HTTP Form Attacks Reloaded

HTTP Basic Authentication Attack (Easy)

Basic Authentication and Form Bruteforcing ...

Challenge 5: Digest Authentication Attack

Challenge 6: Digest Authentication Reloaded

Challenge 8: Broken Authentication

Challenge 9: Session ID Analysis Solution

Challenge 10: Session ID Analysis II

Challenge 11: Session ID Analysis III

Challenge 12: Decrypting SSL Traffic

Challenge 13: HTTP Forensics

Challenge 14: HTTP Traffic File Carving

Challenge 15: HTTP Traffic File Carving II

Challenge 16: HTML Injection

Challenge 17: HTML Injection II

Challenge 18: HTML Injection III

Challenge 20: XSS

Challenge 21: XSS II

Challenge 22: XSS III

Challenge 23: XSS IV

Challenge 24: XSS V

Challenge 25: XSS VI

Challenge 26: XSS VII

Challenge 27: XSS VIII

Challenge 28: XSS IX

Challenge 29: XSS X

Challenge 30: XSS XI

Challenge 31: XSS XII

Challenge 32: XSS XIII

Challenge 35: XSS 16

Challenge 36: XSS 17

Unvalidated Redirects: As Easy as it Gets

Unvalidated Redirects: Decode Me!

Unvalidated Redirects: Daisy Chains!

Unvalidated Redirects: Hashing

Unvalidated Redirects: Hash with a ...

Unvalidated Redirects: No Hints this Time!

Unvalidated Redirects: Salt is included ...

Unvalidated Redirects: Security through ...

CSRF: If only all Pentests were this Easy!

CSRF: Not All Links are Clickable

CSRF: No he won't click your links!

CSRF: How about a POST?

CSRF: Would hate a predictable life!

CSRF: Mutual Exclusivity is Important for ...

CSRF: Wow! This just got hard!

CSRF: We only hire after Reference Checks!

CSRF: What's in a Name?

CSRF: Custom Code is Always a Target!

CSRF: O! Token Where do you hide?

CSRF: The Web is Cross Domain :)

Web
Analytics