Browse everything
Roadmaps, courses and hands-on labs — search or filter. All roadmaps · Lab catalogue
Filters 3
Filter results
Type
Topic
Included in
27 results
Hands-on labStationX Membership
OWASP Top Ten 2025 - A01 Broken Access ControlsIntroduction To OWASP Top TenDuration: 1 hIn this lab, students will explore the "A01:2025 Broken Access Control" vulnerability of the OWASP Top Ten by identifying and exploiting common access control weaknesses in a web application.
Hands-on labStationX Membership
OWASP Top Ten 2025 - A02 Security MisconfigurationIntroduction To OWASP Top TenDuration: 1 hIn this lab, students will explore the "A02:2025 Security Misconfiguration" vulnerability of the OWASP Top Ten to identify and exploit security misconfigurations within a web application and its…Hands-on labStationX Membership
OWASP Top Ten 2025 - A03 Software Supply Chain FailuresIntroduction To OWASP Top TenDuration: 1 hIn this lab, students will learn about the "A03:2025 Software Supply Chain Failures" vulnerability of the OWASP Top Ten and explore risks introduced through the software supply chain, including…Hands-on labStationX Membership
OWASP Top Ten 2025 - A04 Cryptographic FailuresIntroduction To OWASP Top TenDuration: 1 hIn this lab, students will explore the "A04:2025 Cryptographic Failures" vulnerability of the OWASP Top Ten and examine how improper use of cryptography can expose sensitive data.Hands-on labStationX Membership
OWASP Top Ten 2025 - A05 InjectionIntroduction To OWASP Top TenDuration: 1 hIn this lab, students will explore the "A05:2025 Injection" vulnerability of the OWASP Top Ten to identify and exploit injection vulnerabilities by crafting malicious input to manipulate backend…Hands-on labStationX Membership
OWASP Top Ten 2025 - A06 Insecure DesignIntroduction To OWASP Top TenDuration: 1 hThis lab explores the "A06:2025 Insecure Design" vulnerability of the OWASP Top Ten and focuses on identifying security weaknesses introduced during the design phase of an application.Hands-on labStationX Membership
OWASP Top Ten 2025 - A07 Authentication FailuresIntroduction To OWASP Top TenDuration: 1 hIn this lab, students will learn about the "A07:2025 Authentication Failures" vulnerability of the OWASP Top Ten and explore weaknesses in authentication mechanisms, including poor session handling…Hands-on labStationX Membership
OWASP Top Ten 2025 - A08 Software or Data Integrity FailuresIntroduction To OWASP Top TenDuration: 1 hIn this lab, students will explore the "A08:2025 Software or Data Integrity Failures" vulnerability of the OWASP Top Ten and analyze how failures in software or data integrity can lead to system…Hands-on labStationX Membership
OWASP Top Ten 2025 - A09 Security Logging & Alerting FailuresIntroduction To OWASP Top TenDuration: 1 hIn this lab, students will learn about the "A09:2025 Security Logging and Alerting Failures" vulnerability of the OWASP Top Ten and investigate the impact of insufficient logging and alerting.Hands-on labStationX Membership
OWASP Top Ten 2025 - A10 Mishandling of Exceptional ConditionsIntroduction To OWASP Top TenDuration: 1 hIn this lab, students will learn about the "A10:2025 Mishandling of Exceptional Conditions" vulnerability of the OWASP Top Ten and examine how improper error handling and unexpected conditions can…Hands-on labStationX Membership
OWASP Top Ten 2025 - CapstoneIntroduction To OWASP Top TenDuration: 3 hIn this hands-on capstone lab, students will apply the knowledge and skills gained throughout the OWASP Top 10 2025 training series by investigating and exploiting vulnerabilities within a realistic…Hands-on labStationX Membership
OWASP Top Ten 2025 - Capstone (pt.1)Introduction To OWASP Top TenDuration: 1 h 30 minIn this hands-on capstone lab, students will apply the knowledge and skills gained throughout the OWASP Top 10 2025 training series by investigating and exploiting vulnerabilities within a realistic…Hands-on labStationX Membership
OWASP Top Ten 2025 - Capstone (pt.2)Introduction To OWASP Top TenDuration: 1 h 30 minThis is part 2 (pt.2) of the OWASP Top Ten 2025 Capstone Lab.
Hands-on labStationX Membership
Web 201 - Lab 1: Recon ToolsAdvanced Web Application ExploitationDuration: 1 hIn this lab we are going to cover a number of recon tools that should be used in the beginning of any web application penetration test.
Hands-on labStationX Membership
Web 201 - Lab 2.1: Detecting and Exploiting Hard to Find SQL injectionsAdvanced Web Application ExploitationDuration: 1 hIn this lab, we will look at a few different examples of how our input could be processed or blocked.Hands-on labStationX Membership
Web 201 - Lab 2.2: Advanced SqlmapAdvanced Web Application ExploitationDuration: 2 hIn this lab we will explore some more advanced features of the SQL injection tool sqlmap, that will enable us to use it to exploit more difficult SQL injection vulnerabilities.Hands-on labStationX Membership
Web 201 - Lab 2.3: Manual Blind SQL InjectionAdvanced Web Application ExploitationDuration: 2 hIn this lab, we will cover how to exploit Blind SQL Injections manually.Hands-on labStationX Membership
Web 201 - Lab 2.4: NoSQL InjectionAdvanced Web Application ExploitationDuration: 1 hIn this lab, we will explore a few aspects of NoSQL injections.Hands-on labStationX Membership
Web 201 - Lab 3.1: Cross Site Scripting Filter EvasionAdvanced Web Application ExploitationDuration: 1 hIn this lab, we will explore a few different filters and how to evade them to display an alert box.Hands-on labStationX Membership
Web 201 - Lab 3.2: Exploiting Misconfigured CORSAdvanced Web Application ExploitationDuration: 1 hIn this lab we will compare and constrast default operation, secure configuration of CORS, and misconfigured CORS.Hands-on labStationX Membership
Web 201 - Lab 4: Advanced OS Command InjectionAdvanced Web Application ExploitationDuration: 1 hIn the first part of this lab, we will explore some methods of evading the filters and still accomplishing the goal.Hands-on labStationX Membership
Web 201 - Lab 5: Advanced Local File InclusionAdvanced Web Application ExploitationDuration: 1 hAs an attacker, the two main goals in exploiting LFI are typically to expose secret or sensitive information or to cause arbitrary code to be executed, giving them remote command execution.Hands-on labStationX Membership
Web 201 - Lab 6: Advanced CSRFAdvanced Web Application ExploitationDuration: 1 hCross Site Request Forgery (CSRF) is when an attacker can induce a victim to make a request to a site they are already authenticated to and cause them to make changes that they otherwise wouldn't…Hands-on labStationX Membership
Web 201 - Lab 7.1: XXE to Obtain Arbitrary FilesAdvanced Web Application ExploitationDuration: 1 hIn this lab, we will explore the basic limitations of XXE and techniques that can be used in a PHP web application to overcome them.Hands-on labStationX Membership
Web 201 - Lab 7.2: Out of Band XXE AttacksAdvanced Web Application ExploitationDuration: 1 hSometimes there is an XML External Entity vulnerability, but exploiting it doesn't send any data back within the web application.Hands-on labStationX Membership
Web 201 - Lab 8: Server Side Request ForgeryAdvanced Web Application ExploitationDuration: 1 hIn this example we will be faced with a web application that will simply open whatever resource you specify, with increasingly strict restrictions.Hands-on labStationX Membership
Web 201 - Lab 9: Insecure Deserialization in Python and JavaAdvanced Web Application ExploitationDuration: 1 hInsecure Deserialization occurs when the web application takes a serialized object, that has been exposed to the user and possibly tampered with, and converts it back into an object.