StationX
Start free

← All labs

Advanced Web Application Exploitation

Web hacking · 14 labs · ≈ 16 h of hands-on labs · Unlimited attempts — included in StationX Membership

🔒 StationX Membership — $299 / year ($24.92/mo billed annually) · Already have it? Sign in with StationX

  1. Web 201 - Lab 1: Recon Tools - ScoredDuration: 1 h
  2. Web 201 - Lab 2.1: Detecting and Exploiting Hard to Find SQL injectionsDuration: 1 h
  3. Web 201 - Lab 2.2: Advanced SqlmapDuration: 2 h
  4. Web 201 - Lab 2.3: Manual Blind SQL InjectionDuration: 2 h
  5. Web 201 - Lab 2.4: NoSQL Injection (Scored)Duration: 1 h
  6. Web 201 - Lab 3.1: Cross Site Scripting Filter EvasionDuration: 1 h
  7. Web 201 - Lab 3.2: Exploiting Misconfigured CORSDuration: 1 h
  8. Web 201 - Lab 4: Advanced OS Command InjectionDuration: 1 h
  9. Web 201 - Lab 5: Advanced Local File InclusionDuration: 1 h
  10. Web 201 - Lab 6: Advanced CSRFDuration: 1 h
  11. Web 201 - Lab 7.1: XXE to Obtain Arbitrary FilesDuration: 1 h
  12. Web 201 - Lab 7.2: Out of Band XXE AttacksDuration: 1 h
  13. Web 201 - Lab 8: Server Side Request ForgeryDuration: 1 h
  14. Web 201 - Lab 9: Insecure Deserialization in Python and JavaDuration: 1 h

Scored: A scored lab checks your work and records a score you can see on the lab page.