This 13-level vulnerable app is focused on ethical hacking rookies & new web developers. Nonetheless, that should not stop experienced ethical hackers or developers from having some fun!
| Level | Subject |
|---|---|
| Level 1 | A3 Cross-Site Scripting (XSS) |
| Level 2 | A1 Injection |
| Level 3 | Data Validation; Parameter Delimiter |
| Level 4 | A4 Insecure Direct Object References |
| Level 5 | A7 Missing Function Level Access Control |
| Level 6 | A8 Cross-Site Request Forgery (CSRF) |
| Level 7 | A3 Cross-Site Scripting (XSS) |
| Level 8 | File inclusion |
| Level 9 | A2 Broken Authentication and Session Management |
| Level 10 | Source Code Tampering |
| Level 11 | Bypassing blacklists |
| Level 12 | Dictionary Attack |
| Level 13 | A10 Unvalidated Redirects and Forwards |
Good luck: http://ctf.infosecinstitute.com/ctf2/
Note: This is a reference for what I did to solve the challange. I'll put more alternative ways whenever I see it's useful.
@KINGSABRI