Secure Coding Labs

Practice real-world secure coding scenarios through hands-on challenges and labs.

Logging of Excessive Data

The application generates an excessive volume of log data, resulting in oversized log files and reduced visibility into security-relevant events....

medium

Improper Handling of Expired Resources

medium CWE-672 gcp

The application does not implement adequate lifecycle management for generated artifacts, temporary resources, or expired assets. Resources that have exceeded...

high

Missing Vulnerability Scanning for Container Images

high CWE-693 CWE-1269 gcp

Container images are not configured to be scanned for known vulnerabilities before deployment. Without image vulnerability scanning, insecure base images,...

medium

Missing Encryption Key for GCP Instance

medium CWE-311 gcp GCP

The GCP instance is not configured to use a customer-managed encryption key. The relevant Terraform resource does not set encryption_key_name,...

high

Cleartext Transmission of Sensitive Information

high CWE-319 gcp

The application transmits sensitive or security-critical data over an unencrypted communication channel. Because the data is sent in cleartext, an...

high

Use of Hard-coded Password

high CWE-259 CWE-798 gcp

The application contains a hard-coded password within its source code, binary, configuration, or authentication logic. Hard-coded passwords create a serious...

high

Missing Encryption at Rest for Azure Data Explorer Cluster

high CWE-311 azure Azure

The Azure Data Explorer cluster is not configured to enforce disk encryption at rest. The azurerm_kusto_cluster resource in iac/main.tf does...

high

Permissive Cross-Domain Security Policy

high CWE-942 azure

The application defines an overly permissive cross-domain security policy that allows communication with untrusted or broadly matched domains. This weakens...

medium

Missing Customer-Managed Key Encryption on Azure Cosmos DB

medium CWE-922 azure Azure

The Azure Cosmos DB account does not configure a customer-managed encryption key because key_vault_key_id is omitted from the azurerm_cosmosdb_account resource....

No matching labs found

Try adjusting your search keywords or language filter.