Web Application Hacking Challenges Pack

Web Application Hacking Challenges Pack

25 challenges web autocontenidos en Docker:

• SQLi (5 challenges) — Union-based, blind boolean, blind time-based, second-order, filter bypass.
• XSS (4 challenges) — Reflected, stored, DOM-based, CSP bypass con dangling markup.
• SSTI (3 challenges) — Jinja2, Twig, Freemarker con sandbox escape progresivo.
• SSRF (3 challenges) — Basic, con redirect bypass, cloud metadata (AWS/GCP).
• Deserialization (3 challenges) — PHP unserialize, Java ObjectInputStream, Python pickle.
• Auth bypass (4 challenges) — JWT none algorithm, JWT key confusion, OAuth redirect, IDOR chain.
• Misc (3 challenges) — Race condition, HTTP request smuggling, prototype pollution.
• Cada challenge: docker-compose.yml, README con hints progresivos, writeup completo.