- WebDecode (easy)
- Unminify (easy)
- IntroToBurp (easy)
- Bookmarklet (easy)
- Local Authority (easy)
- Inspect HTML (easy)
- Includes (easy)
- Cookies (easy)
- Scavenger Hunt (easy)
- GET aHEAD (easy)
- dont-use-client-side (easy)
- logon (easy)
- Insp3ct0r (easy)
- where are the robots (easy)
- Trickster (medium)
- No Sql Injection (medium)
- SOAP (medium)
- More SQLi (medium)
- MatchTheRegex (medium)
- Java Code Analysis!?! (medium)
- findme (medium)
- SQLiLite (medium)
- SQL Direct (medium)
- Secrets (medium)
- Search source (medium)
- Roboto Sans (medium)
- Power Cookie (medium)
- Forbidden Paths (medium)
- JAuth (medium)
- caas (medium)
- login (medium)
- Super Serial (medium)
- Most Cookies (medium)
- Web Gauntlet 2 (medium)
- Some Assembly Required 1 (medium)
- Who are you? (medium)
- Some Assembly Required 2 (medium)
- Web Gauntlet 3 (medium)
- More Cookies (medium)
- It is my Birthday (medium)
- Web Gauntlet (medium)
- Irish-Name-Repo 1 (medium)
- Client-side-again (medium)
- Irish-Name-Repo 2 (medium)
- JaWT Scratchpad (medium)
- picobrowser (medium)
- Irish-Name-Repo 3 (medium)
- elements (hard)
- msfroggenerator2 (hard)
- cancri-sp (hard)
- noted (hard)
- Live Art (hard)
- notepad (hard)
- Bithug (hard)
- Some Assembly Required 4 (hard)
- Some Assembly Required 3 (hard)
- Java Script Kiddie 2 (hard)
- Java Script Kiddie (hard)