All kind of web based challenges but only around half are really related to exploiting vulnerabilities and bypassing the system, note that the first challenges aren't really hacking challenges but are used to check whether you have the ability to think clear enough to solve them.. what's a hacker with no common sense? :p