Practice Lab

Exploiting Vulnerabilities in Google Gruyere

Name: Exploiting Vulnerabilities in Google Gruyere
Brand: CodeRed

Learn to identify and exploit Cross-Site Scripting (XSS), privilege escalation, and data exposure vulnerabilities in Google Gruyere through hands-on labs. This lab focuses on practical exercises to discover these security weaknesses, understand their implications, and develop strategies for effective mitigation and secure coding practices.

1 Hour

Advanced

Validation of Completion Included

FREE FOR 1 YEAR • NO CARD

Create your Free Account

Instant access to CTFs, labs and courses.

Free: 15 CTFs • 15 Labs • 25+ Video Courses

I agree to the Terms & Conditions and Privacy Policy

Continue with Google

Already have an account? Sign in

Overview What You Will Learn Curriculum Instructor

Lab Description

Google Gruyere is a hacking lab created by Google that contains various security vulnerabilities. It demonstrates how web application flaws can be exploited and provides insights into defending against such attacks. In this lab, we will tackle challenges like cross-site scripting (XSS) and cross-site request forgery (XSRF), and examine the impacts of these vulnerabilities, such as denial-of-service, information disclosure, and remote code execution. Some challenges will involve reviewing the Gruyere source code, which Google provides in both client-side and server-side versions written in Python. Analyzing this code will help you understand how these vulnerabilities function. In this lab, we will explore several of these vulnerabilities.

What You Will Learn

Program Curriculum

FREE FOR 1 YEAR • NO CARD

Create your Free Account

Instant access to CTFs, labs and courses.

Free: 15 CTFs • 15 Labs • 25+ Video Courses

I agree to the Terms & Conditions and Privacy Policy

Continue with Google

Already have an account? Sign in

Join over 1 Million professionals from the most renowned Companies in the world!

Choose the Pro Plan That Fits Your Learning Journey

Invest in your future with flexible Pro subscription plans. Whether you're starting your cybersecurity journey or expanding your expertise, choose the membership duration that works for you and gain access to our complete learning platform.

Monthly Plans

Annual Plans

Save 20% with our annual plans!

Pro

Ideal for continuous learning, offering extensive resources with 900+ courses and diverse Learning Paths to enhance your skills.

^$ 599.00

Billed annually or $69.00 billed monthly

Get Started Now

Start your 7-day trial for $1

What is included

Access to 900+ Premium Short Courses
70+ Structured Learning Paths
Validation of Completion with All Courses and Learning Paths
New Courses Added Every Month

Early Access Offer

Pro +

Experience immersive learning with Practice Labs and CTF Challenges for comprehensive skill-building.

^$ 699.00

Billed annually or $79.00 billed monthly

Get Started Now

Start your 7-day trial for $1

Everything in Pro and

600+ Practice Labs with Guided Instructions
400+ CTF Challenges with Detailed Walkthroughs
New Practice Labs and Challenges Added Every Month

Related Practice Labs

Practice Lab

Integrate and Automate API Security and Performance Testing

Artificial Intelligence

Integrate API security and performance testing using Karate and Gatling by validating Basic and OAuth 2.0/JWT authentication, executing load tests, and analyzing functional and performance reports for API reliability.

Integrate API security and performance testing using Karate a...

$19.00

Intermediate

1 hr 0 m

Hello
Practice Lab

Implement Robust API Testing using Karate Framework

Artificial Intelligence

Build robust API tests using the Karate framework by executing CRUD operations, validating status codes and response data, applying fuzzy and schema matching, externalizing test data, and configuring reusable test environments.

Build robust API tests using the Karate framework by executin...

$19.00

Intermediate

1 hr 0 m

Hello
Practice Lab

Implementing an API Automation Framework using Karate and Maven

Software Development

Set up an API automation framework using IntelliJ IDEA, Maven, and Karate by creating a project, configuring dependencies, and implementing a Gherkin-based API GET request to validate the testing environment and framework integration.

Set up an API automation framework using IntelliJ IDEA, Maven...

$19.00

Intermediate

1 hr 0 m

Hello
Practice Lab

Manage Sophos Firewall Reporting and Network Monitoring

Software Development

Manage Sophos Firewall through centralized controls, configure traffic monitoring and reporting, analyze network activity, and use diagnostic tools for packet capture, system monitoring, and network troubleshooting.

Manage Sophos Firewall through centralized controls, configur...

$19.00

Intermediate

1 hr 0 m

Hello
Practice Lab

Configure and Manage VPN Connectivity in Sophos Firewall

Vulnerability Assessment and Pentesting

Configure and manage Sophos Firewall VPN solutions, including IPsec site-to-site, SSL remote access, and clientless SSL VPN, while applying authentication, encryption, access policies, failover, and traffic routing.

Configure and manage Sophos Firewall VPN solutions, including...

$19.00

Intermediate

1 hr 0 m

Hello
Practice Lab

Configure Authentication and Traffic Shaping in Sophos Firewall

Vulnerability Assessment and Pentesting

Configure Sophos Firewall to implement transparent user authentication with STAS and apply traffic shaping policies to manage bandwidth, prioritize network resources, and enforce identity-based access controls.

Configure Sophos Firewall to implement transparent user authe...

$19.00

Intermediate

1 hr 0 m

Hello
Practice Lab

Configure and Validate Threat Protection in Sophos Firewall

Vulnerability Assessment and Pentesting

Configure and analyze Sophos Firewall security controls, including SSL/TLS decryption, certificate management, malware protection, application control, traffic shaping, web filtering, web server protection, and intrusion prevention.

Configure and analyze Sophos Firewall security controls, incl...

$19.00

Intermediate

1 hr 0 m

Hello
Practice Lab

Configuring OAuth 2.0 Authentication and Google APIs

Vulnerability Assessment and Pentesting

Configure OAuth 2.0 authentication in Google Cloud by creating a project, setting up the consent screen, generating web application credentials, and enabling the Google People API for secure application integration.

Configure OAuth 2.0 authentication in Google Cloud by creatin...

$19.00

Intermediate

1 hr 0 m

Hello