Skip to content

HTB CWES

HTB Certified Web Exploitation Specialist (CWES)

100 questionsEnglishFree practice

Start here

Take a five-question warm-up.

Get explanations as you go. Your progress saves in this browser.

Full question bank

Work through all 100 questions at your pace.

Open question bank

Focus your practice

Practice by topic

Web Enumeration And Recon15 questions Auth And Session Attacks12 questions Sql Injection11 questions Web Api Attacks10 questions Bug Bounty Methodology9 questions Command Injection9 questions File Inclusion8 questions Xss8 questions Business Logic Flaws5 questions Xxe5 questions File Upload Vulnerabilities4 questions Ssrf4 questions