+
Security Training Platform
OWASP Top 10 Lab
Interactive security training covering the OWASP Web Application Top 10 (2025) and API Security Top 10 (2023). Read the theory, then exploit live vulnerable endpoints to find the flags.
OWASP Web Top 10
The most critical security risks to web applications.
- 01 Broken Access Control A01:2025 Critical
- 02 Security Misconfiguration A02:2025 High
- 03 Software Supply Chain Failures A03:2025 High
- 04 Cryptographic Failures A04:2025 High
- 05 Injection A05:2025 High
- 06 Insecure Design A06:2025 High
- 07 Authentication Failures A07:2025 High
- 08 Software or Data Integrity Failures A08:2025 High
- 09 Security Logging and Alerting Failures A09:2025 Medium
- 10 Mishandling of Exceptional Conditions A10:2025 Medium
OWASP API Top 10
The unique security risks of modern APIs.
- 01 Broken Object Level Authorization API1:2023 Critical
- 02 Broken Authentication API2:2023 Critical
- 03 Broken Object Property Level Authorization API3:2023 High
- 04 Unrestricted Resource Consumption API4:2023 High
- 05 Broken Function Level Authorization API5:2023 High
- 06 Unrestricted Access to Sensitive Business Flows API6:2023 High
- 07 Server Side Request Forgery API7:2023 High
- 08 Security Misconfiguration API8:2023 High
- 09 Improper Inventory Management API9:2023 Medium
- 10 Unsafe Consumption of APIs API10:2023 Medium
Total Flags
27
Web Challenges
10 items, 19 challenges
API Challenges
10 items, 11 challenges
Source