Secure Coding Labs

Practice real-world secure coding scenarios through hands-on challenges and labs.

ECR Image Scan Disabled

Repository image scans reports on software with known vulnerable packages . Remediation Enable ECR image scanning. See https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ecr_repository

informational

RDS Unencrypted at Rest

informational CWE-325 aws

In the absence of encryption at rest, compromised data can be easily read. RDS Database instances encryption at rest enhances...

informational

RDS with Insufficient Backup Recovery

informational aws

RDS backup retention for clusters defaults to 1 day, this may not be enough to recover from an accidental or...

informational

DynamoDB without Point In Time Recovery

informational aws

Without point in time recovery, accidental or malicious modification of data cannot be rolled back. Remediation Enable point in time...

informational

DynamoDB Unencrypted At Rest

informational CWE-325 aws

In the absence of encryption at rest, compromised data can be easily read. DynamoDB table encryption at rest enhances data...

high

Lack of Owner

high CWE-284 solidity

Due to missing or insufficient access controls, adversaies can withdraw some or all Ether from the contract account.

high

Unprotected Selfdestruct

high CWE-284 solidity

Unprotected selfdestruct happens when due to missing or insufficient access controls, adversaries can self-destruct the contract. The selfdestruct(address) function removes...

medium

DoS with Block Gas Limit

medium CWE-400 solidity

Each block has an upper bound on the amount of gas that can be spent, determining the extent of computational...

high

DOS with Failed Call

high CWE-703 solidity

Denial of Service (DOS) with Revert happens when external calls fail accidentally or deliberately. Revert can result the caller to...

No matching labs found

Try adjusting your search keywords or language filter.