Developer Security Challenge Library

Practice real-world secure coding scenarios through hands-on challenges and labs.

ECR Image Scan Disabled

Repository image scans reports on software with known vulnerable packages . Remediation Enable ECR image scanning. See https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ecr_repository

informational

RDS Unencrypted at Rest

informationalCWE-325aws

In the absence of encryption at rest, compromised data can be easily read. RDS Database instances encryption at rest enhances...

informational

RDS with Insufficient Backup Recovery

informationalaws

RDS backup retention for clusters defaults to 1 day, this may not be enough to recover from an accidental or...

informational

DynamoDB without Point In Time Recovery

informationalaws

Without point in time recovery, accidental or malicious modification of data cannot be rolled back. Remediation Enable point in time...

informational

DynamoDB Unencrypted At Rest

informationalCWE-325aws

In the absence of encryption at rest, compromised data can be easily read. DynamoDB table encryption at rest enhances data...

high

Lack of Owner

highCWE-284solidity

Due to missing or insufficient access controls, adversaies can withdraw some or all Ether from the contract account.

high

Unprotected Selfdestruct

highCWE-284solidity

Unprotected selfdestruct happens when due to missing or insufficient access controls, adversaries can self-destruct the contract. The selfdestruct(address) function removes...

medium

DoS with Block Gas Limit

mediumCWE-400solidity

Each block has an upper bound on the amount of gas that can be spent, determining the extent of computational...

high

DOS with Failed Call

highCWE-703solidity

Denial of Service (DOS) with Revert happens when external calls fail accidentally or deliberately. Revert can result the caller to...

No matching labs found

Try adjusting your search keywords or language filter.