Secure Coding Labs

Practice real-world secure coding scenarios through hands-on challenges and labs.

Overly Permissive IAM Scope

The GCP service account is configured with an overly permissive OAuth scope, granting cloud-platform access instead of the minimal scope...

medium

GCP Insufficient Logging

medium CWE-778 gcp GCP

The application or cloud environment does not sufficiently log security-critical events. Important actions such as authentication failures, access attempts, storage...

high

GCP Security Misconfiguration

high CWE-693 CWE-732 gcp GCP

The GCP environment contains security misconfigurations in both storage access controls and monitoring response configuration. The log archive bucket does...

high

Improper Validation of Integrity Check Value

high CWE-354 c operational-technology-ot

This vulnerability occurs when an application fails to properly validate integrity check values such as checksums, hashes, or message authentication...

medium

Insecure Default Configuration

medium CWE-1188 c

The product initializes or sets a resource with a default configuration that is intended to be changed by an installer,...

high

Active Debug Code Left in Production

high CWE-489 CWE-1295 c

Active debug code can create unintended entry points or expose sensitive information. The severity of the exposed debug code will...

high

Buffer Over-read

high CWE-126 cpp

Occurs when a program reads more data from a buffer than the buffer actually contains, causing the program to access...

high

Supply-Chain Compromise

high incident-response javascript github

Adversaries may manipulate software dependencies and development tools prior to receipt by a final consumer for the purpose of data...

low

Command and Scripting Interpreter LLM

low incident-response artificial-inteligence

Adversaries craft malicious inputs (prompts) that are interpreted and executed by the Language Model, leading to unintended actions. The LLM...

No matching labs found

Try adjusting your search keywords or language filter.