|
CSRF Bank Transfer - Zenith Bank
|
Web - Hard |
500 |
|
|
DOM XSS — Haven Luxury Real Estate
|
Web - Real World |
300 |
|
|
University Registrar Breach
|
Web - Red Team |
500 |
|
|
Crypto Exchange
|
Web - Red Team |
500 |
|
|
Hospital Data Breach
|
Web - Red Team |
500 |
|
|
Bank Heist
|
Web - Red Team |
500 |
|
|
CORS Misconfiguration
|
Web - Hard |
500 |
|
|
GraphQL Introspection Leak
|
Web - Hard |
400 |
|
|
SSTI TemplateFlow
|
Web - Hard |
400 |
|
|
Race Condition / Double Spend
|
Web - Hard |
400 |
|
|
SSRF Cloud Scanner
|
Web - Hard |
400 |
|
|
Two-Factor Bypass
|
Web - Hard |
400 |
|
|
API Gateway / Mass Assignment
|
Web - Hard |
400 |
|
|
Token Leak
|
Web - Hard |
400 |
|
|
Marketplace / Advanced SQLi
|
Web - Hard |
400 |
|
|
Cloud Console
|
Web - Real World |
600 |
|
|
Session Fixation
|
Web - Medium |
300 |
|
|
XXE XML External Entity
|
Web - Medium |
300 |
|
|
NoSQL Login
|
Web - Medium |
300 |
|
|
Command Injection
|
Web - Medium |
300 |
|
|
Backup Hunter
|
Web - Medium |
197 |
|
|
Price Hacker
|
Web - Medium |
198 |
|
|
XSS Forum
|
Web - Medium |
198 |
|
|
Secure Notes JWT
|
Web - Medium |
198 |
|
|
HR Portal / IDOR
|
Web - Medium |
195 |
|
|
Broken Access
|
Web - Medium |
197 |
|
|
Forbidden Bypass
|
Web - Medium |
168 |
|
|
Cookie Monster
|
Web - Medium |
164 |
|
|
Decode Me
|
Web - Easy |
100 |
|
|
Hidden File
|
Web - Easy |
50 |
|
|
Inspector Gadget
|
Web - Easy |
28 |
|
|
Comment Leak
|
Web - Easy |
47 |
|
|
Login Bypass
|
Web - Easy |
35 |
|
|
Hidden in Source
|
Web - Easy |
20 |
|