Secure Coding Labs

Practice real-world secure coding scenarios through hands-on challenges and labs.

Command Injection

critical battle CWE-78 CWE-88 ruby typescript javascript go csharp

Command injection happens when untrusted input is used to construct system command without necessary escaping that is later evaluate and...

low

Homograph Attack

low CWE-1007 CWE-290 go ruby python csharp java

Homograph attack happen characters from different scripts or alphabets that look similar to characters in another script are used to...

low

Visual Spoofing

low CWE-290 CWE-1007 CWE-178 CWE-20 CWE-176 go ruby python csharp java

A visual spoofing (homograph) attack occurs when characters that appear visually identical or nearly indistinguishable are substituted to deceive users...

critical

Insecure Deserialisation

critical CWE-502 javascript java python csharp go

Insecure deserialisation occurs when an application does not properly validate or sanitize untrusted input during the deserialization process, leading to...

low

Float Overflow

low CWE-190 CWE-128 CWE-191 csharp javascript go ruby python

Float Overflow (Numeric Imprecision) happen when a program perform floating-point arithmetic and does not handle the rounding imprecision or approximate...

medium

Path Traversal

medium battle exploitation CWE-22 CWE-41 CWE-23 CWE-36 CWE-73 go typescript javascript python csharp

Path Traversal occurs when untrusted input is incorporated into a file path without proper canonicalisation or validation. An adversary can...

critical

SQL Injection

critical CWE-89 CWE-20 CWE-943 javascript ruby java python go

SQL Injection occurs when untrusted input is incorporated into a SQL query and executed without proper validation or escaping. This...

low

Integer Underflow

low CWE-128 CWE-191 csharp typescript python go java

An integer underflow (or numeric underflow in general) happens when an arithmetic operation results in a numeric value that is...

medium

IAM Wildcard Policy

medium CWE-250 aws terraform

A wildcard IAM policy, although convenient, increases likelihood of malicious actions on resources and principals. IAM policy should follow the...

No matching labs found

Try adjusting your search keywords or language filter.