Secure Coding Labs

Practice real-world secure coding scenarios through hands-on challenges and labs.

Supply-Chain Compromise

high incident-response javascript github

Adversaries may manipulate software dependencies and development tools prior to receipt by a final consumer for the purpose of data...

low

Command and Scripting Interpreter LLM

low incident-response artificial-inteligence

Adversaries craft malicious inputs (prompts) that are interpreted and executed by the Language Model, leading to unintended actions. The LLM...

medium

Valid Accounts: Cloud Accounts

medium incident-response python cloudwatch

The attacker uses valid credentials obtained through the reset token to access user accounts.

critical

Compromise Software Dependencies and Development Tools

critical incident-response javascript github

Malicious npm packages (e.g. compromised versions of common dependencies) are published and pulled into developer and CI environments, providing the...

critical

Exploit Public-Facing Application

critical incident-response javascript react

Attackers send crafted React Server Components Flight requests to public-facing endpoints (for example /_rsc) on vulnerable React/Next.js servers, gaining unauthenticated...

medium

MCP Tool Collision

medium CWE-706 artificial-inteligence

Tool collision occurs when two MCP tools with the same or confusingly similar name, namespace, or capability are loaded into...

high

MCP Line Jumping

high CWE-20 CWE-829 artificial-inteligence

Line-jumping is a prompt-injection variant where an attacker injects control characters, unexpected newlines, or specially crafted tokens into an MCP...

high

MCP Tool Shadowing

high CWE-284 CWE-829 artificial-inteligence

Tool shadowing occurs when a malicious MCP tool impersonates a legitimate one by exploiting name or namespace collisions, registry weaknesses,...

medium

Hash Collision

medium CWE-327 CWE-328 move

A hash collision occurs when multiple distinct inputs produce the same hash value or map to the same hash bucket....

No matching labs found

Try adjusting your search keywords or language filter.