Browse everything
Roadmaps, courses and hands-on labs — search or filter.
All roadmaps
·
Lab catalogue
Search
Type: Hands-on lab
×
Topic: Web hacking
×
Clear all
Type
✓ Hands-on lab
27
Topic
Azure
431
Cyber Security Labs
283
Blue Team
252
Essential IT
188
Programming
161
General Cyber security
158
AWS
124
Networking
116
Data Science
101
VMware
80
Advanced General Cyber Security
51
Linux
46
Hacking
44
✓ Web hacking
27
Google Cloud
9
Artificial Intelligence
3
Included in
StationX Unlimited
27
27
results
Hands-on lab
OWASP Top Ten 2025 - A01 Broken Access Controls
Hands-on lab
OWASP Top Ten 2025 - A02 Security Misconfiguration
Hands-on lab
OWASP Top Ten 2025 - A03 Software Supply Chain Failures
Hands-on lab
OWASP Top Ten 2025 - A04 Cryptographic Failures
Hands-on lab
OWASP Top Ten 2025 - A05 Injection
Hands-on lab
OWASP Top Ten 2025 - A06 Insecure Design
Hands-on lab
OWASP Top Ten 2025 - A07 Authentication Failures
Hands-on lab
OWASP Top Ten 2025 - A08 Software or Data Integrity Failures
Hands-on lab
OWASP Top Ten 2025 - A09 Security Logging & Alerting Failures
Hands-on lab
OWASP Top Ten 2025 - A10 Mishandling of Exceptional Conditions
Hands-on lab
OWASP Top Ten 2025 - Capstone
Hands-on lab
OWASP Top Ten 2025 - Capstone (pt.1)
Hands-on lab
OWASP Top Ten 2025 - Capstone (pt.2)
Hands-on lab
Web 201 - Lab 1: Recon Tools - Scored
Hands-on lab
Web 201 - Lab 2.1: Detecting and Exploiting Hard to Find SQL injections
Hands-on lab
Web 201 - Lab 2.2: Advanced Sqlmap
Hands-on lab
Web 201 - Lab 2.3: Manual Blind SQL Injection
Hands-on lab
Web 201 - Lab 2.4: NoSQL Injection (Scored)
Hands-on lab
Web 201 - Lab 3.1: Cross Site Scripting Filter Evasion
Hands-on lab
Web 201 - Lab 3.2: Exploiting Misconfigured CORS
Hands-on lab
Web 201 - Lab 4: Advanced OS Command Injection
Hands-on lab
Web 201 - Lab 5: Advanced Local File Inclusion
Hands-on lab
Web 201 - Lab 6: Advanced CSRF
Hands-on lab
Web 201 - Lab 7.1: XXE to Obtain Arbitrary Files
Hands-on lab
Web 201 - Lab 7.2: Out of Band XXE Attacks
Hands-on lab
Web 201 - Lab 8: Server Side Request Forgery
Hands-on lab
Web 201 - Lab 9: Insecure Deserialization in Python and Java