OSWA
OffSec Web Assessor (OSWA)
100 questionsEnglishFree practice
Start here
Take a five-question warm-up.
Get explanations as you go. Your progress saves in this browser.
Start practiceFocus your practice
Practice by topic
Oswa Sqli Category7 questions Oswa Ssrf Category7 questions Oswa Xss Category7 questions Oswa Burp Category6 questions Oswa Csrf Category6 questions Oswa Exam Process Category6 questions Oswa Recon Category6 questions Oswa Upload Category5 questions Oswa Auth Category4 questions Oswa Deserialization Category3 questions Oswa Graphql Category3 questions Oswa Jwt Category3 questions Oswa Lfi Rfi Category3 questions Oswa Ssti Category3 questions Oswa Xxe Category3 questions Oswa Api Category2 questions Oswa Cache Category2 questions Oswa Command Injection Category2 questions Oswa Cors Category2 questions Oswa Http Smuggling Category2 questions Oswa Nosql Category2 questions Oswa Session Category2 questions Oswa Clickjacking Category1 questions Oswa Crlf Category1 questions Oswa Csv Injection Category1 questions Oswa Host Header Category1 questions Oswa Hpp Category1 questions Oswa Http Headers Category1 questions Oswa Idor Category1 questions Oswa Open Redirect Category1 questions Oswa Owasp Top10 Category1 questions Oswa Proto Pollution Category1 questions Oswa Race Condition Category1 questions Oswa Rate Limit Category1 questions Oswa Ssi Category1 questions Oswa Tooling Category1 questions