Developer Security Challenge Library

Practice real-world secure coding scenarios through hands-on challenges and labs.

This is our public challenge library. Enterprise teams also get private, industry-specific challenges built for their stack.

informational

ECR Image Scan Disabled

aws

Repository image scans reports on software with known vulnerable packages . Remediation Enable ECR image scanning. See https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ecr_repository

informational

RDS Unencrypted at Rest

CWE-325aws

In the absence of encryption at rest, compromised data can be easily read. RDS Database instances encryption at rest enhances...

informational

RDS with Insufficient Backup Recovery

aws

RDS backup retention for clusters defaults to 1 day, this may not be enough to recover from an accidental or...

informational

DynamoDB without Point In Time Recovery

aws

Without point in time recovery, accidental or malicious modification of data cannot be rolled back. Remediation Enable point in time...

informational

DynamoDB Unencrypted At Rest

CWE-325aws

In the absence of encryption at rest, compromised data can be easily read. DynamoDB table encryption at rest enhances data...

high

Lack of Owner

CWE-284solidity

Due to missing or insufficient access controls, adversaies can withdraw some or all Ether from the contract account.

high

Unprotected Selfdestruct

CWE-284solidity

Unprotected selfdestruct happens when due to missing or insufficient access controls, adversaries can self-destruct the contract. The selfdestruct(address) function removes...

medium

DoS with Block Gas Limit

CWE-400solidity

Each block has an upper bound on the amount of gas that can be spent, determining the extent of computational...

high

DOS with Failed Call

CWE-703solidity

Denial of Service (DOS) with Revert happens when external calls fail accidentally or deliberately. Revert can result the caller to...

Enterprise

Need something specific?

We build custom, private challenges modelled on your codebase and threat model for enterprise teams.

No matching labs found

Try adjusting your search keywords or selected topic.