Active recall
Instead of re-reading notes, quizzes force you to retrieve answers from memory. This strengthens neural pathways and improves long-term retention of security concepts.
Knowledge testing
Security quizzes that reinforce what you learn.
Test your understanding of bug bounty concepts, identify weak areas, and track mastery across every topic — from XSS fundamentals to advanced API security.
Why quizzes matter in security training.
Reading a walkthrough or completing a lab once does not guarantee retention. Quizzes close the feedback loop between learning and recall, forcing you to retrieve information rather than just recognize it.
Lab reinforcement
Each quiz maps back to lab content. After completing a lab on SQL injection, a targeted quiz ensures you understand the why behind each technique, not just the steps.
Gap detection
Consistent quiz performance reveals which topics you have truly mastered and which need more practice, preventing false confidence before real-world testing.
Topic categories.
Quizzes are organized by the same categories used in learning paths and labs, so progress data stays consistent across the platform.
XSS
Reflected, stored, DOM-based, CSP bypasses, context-aware payloads, and remediation patterns.
Fundamentals
Advanced
SQL Injection
Union-based, blind, error-based, authentication bypass, and parameterized query defense.
Detection
Exploitation
Access Control
IDOR, privilege escalation, horizontal and vertical access control failures, and authorization testing.
IDOR
Broken Auth
SSRF
Server-side request forgery, cloud metadata access, protocol smuggling, and allowlist bypasses.
Basics
Cloud
API Security
Broken object-level authorization, mass assignment, rate limiting, endpoint enumeration, and data exposure.
REST
GraphQL
Authentication
Session management, token handling, multi-factor bypass, password reset flaws, and credential stuffing.
Sessions
Tokens
Recon & Methodology
Subdomain enumeration, content discovery, scope analysis, and structured testing workflows.
Passive
Active
Report Writing
Evidence collection, impact articulation, remediation advice, and responsible disclosure communication.
Structure
Impact
Quiz types.
Different question formats test different levels of understanding, from factual recall to applied reasoning.
Multiple choice
Standard knowledge-check questions with four options. Each answer includes an explanation regardless of whether you got it right or wrong, turning every question into a micro-lesson.
- Concept definition and identification
- Tool and technique selection
- Common vulnerability characteristics
- Defense and remediation choices
Scenario-based
Realistic situations that describe a target, a finding, or a testing context. You choose the correct next step, identify the vulnerability, or assess the impact based on the scenario.
- Given a HTTP response, identify the vulnerability
- Choose the correct testing approach for a scope
- Assess severity and write a brief impact statement
- Prioritize findings in a triage scenario
Mastery tracking.
Every quiz result feeds into a per-topic mastery score that updates as you progress through the platform.
Per-topic mastery bars
Each category displays a mastery percentage based on your cumulative quiz performance. Scores improve with correct answers and decay slightly over time to encourage review.
Weak area identification
The platform highlights topics where your accuracy drops below the mastery threshold and recommends specific labs or paths to revisit before moving forward.
Spaced repetition
Questions you previously answered incorrectly reappear after increasing intervals, following a spaced repetition schedule that optimizes long-term retention.
Progress analytics.
Your quiz history is visualized across multiple dimensions so you can see exactly how your knowledge evolves.
- Accuracy over time — A line chart showing your rolling quiz accuracy across all categories.
- Category breakdown — Compare mastery levels side-by-side to spot imbalances in your knowledge.
- Quiz streak — Track consecutive days of quiz completion to maintain your learning habit.
- XP from quizzes — Every correct answer earns XP that contributes to your overall level and achievements.
- Completion history — Review every quiz you have taken, with your answers and the correct explanations.
Mastery dashboard preview
XSS
87%
SQL Injection
72%
Access Control
54%
SSRF
38%
API Security
65%
Scores update after each quiz. Below 50% triggers a recommended review.
How quizzes fit into the learning workflow.
Quizzes are not isolated tests. They are one step in a repeatable cycle that connects every part of the platform.
1. Learn
Follow a structured path and read the concept explanations for a topic.
2. Practice
Complete the guided drills for that topic, using hints only when stuck.
3. Quiz
Take the topic quiz to verify retention and identify gaps you did not notice during the lab.
4. Review
Revisit weak areas, retake quizzes after spaced intervals, and watch mastery scores climb.
Frequently asked questions.
How many quizzes are available?
BountyLabs includes quizzes across the learning paths and drill categories currently available in the app. New quiz material can be added alongside future content updates.
Do quizzes affect my XP and leaderboard rank?
Yes. Correct quiz answers earn XP that contributes to your overall level, streaks, and leaderboard position. Scenario-based quizzes award bonus XP for higher difficulty.
Can I retake a quiz?
You can retake quizzes to review the material and improve your recorded result.
What happens if I score low on a quiz?
Low scores trigger a recommendation to revisit the related labs and path material. The platform marks the topic as needing review in your mastery dashboard.
Are quiz answers explained?
Every question includes a detailed explanation regardless of whether you answered correctly. Explanations reference the underlying concept and link back to relevant lab content.
Test your knowledge. Find your gaps.
Start a quiz, track your mastery, and let your weak areas guide what you practice next.
Start Training