Web Challenge Numbering

[brasky]

Beginner:

1. 1 - Default credentials #24
2. 2 - PW in Source #28
3. 3 - PW in file #14
4. 4 - Directory Traversal #33
5. 5 - Intercept Request #25
6. 6 - SQL Injection #30
7. 7 - R/LFI #32
8. 8 - Cookie based auth #35
9. 9 - Command Injection #34
10. 10 - IP Whitelist Bypass #36
11. # - Wireshark/tcpdump #38
12. 12 - PW Cracking/Bruteforce #37
13. 13 - Web - File Upload #31

Intermediate: