Secure Coding Labs

Practice real-world secure coding scenarios through hands-on challenges and labs.

Root Container in Kubernetes

Container in a kubernetes can run as root. This introduces specific security risks if an attacker gains access to the...

high

Privilege Escalation in Kubernetes

high CWE-250 kubernetes

Processes with in container can gain additional privileges is if allowPrivilegeEscalation is not set. Remediation

low

Unnecessary Capabilities

low CWE-272 CWE-269 container

A container by default may run with a number of unnecessary capabilities. Linux capabilities enable a subset of the available...

high

Privilege Escalation In Container

high CWE-250 container

Even if a container runs as non-root user, processes can gain high privileges. For example, a binary with setuid flag...

high

Root In Container

high CWE-269 container

Switching to the root user introduces specific security risks if an attacker gains access to the container. To address this,...

low

Information Disclosure

low CWE-497 typescript graphql openapi

Information disclosure, or information leakage, occurs when an app unintentionally exposes sensitive information to its users. Depending on the context,...

medium

Denial Of Service

medium CWE-400 typescript go java move openapi

Limited resources include memory, file system storage, database connection pool entries, and CPU. If an attacker can trigger the allocation...

medium

Insecure Random Number Generator

medium CWE-338 CWE-337 go c csharp typescript javascript

The usage of an insecure pseudo-random number generator for security purposes is dangerous as it can make passwords, API keys,...

high

Reentrancy

high exploitation CWE-841 CWE-284 solidity

Reentrancy is a recursive call issue where a malicious contract calls back the caller contract, before the first call is...

No matching labs found

Try adjusting your search keywords or language filter.