Secure Coding Labs

Practice real-world secure coding scenarios through hands-on challenges and labs.

Broken Object Level Authorization (BOLA) allows attackers to manipulate object identifiers in API requests to gain unauthorized access to data...

Cross-Site Request Forgery (CSRF) is an attack that tricks a victim’s browser into sending an unintended, state-changing request to a...

This vulnerability arises when an application uses methods or functions known to be unsafe—such as eval() in Python or JavaScript,...

Code injection is a vulnerability that occurs when an application passes untrusted input directly into a code interpreter, such as...

Uninitialized Variable vulnerabilities in C++ occur when a variable is declared but not given an initial value before it is...

A Null Pointer Dereference occurs when a program attempts to access or manipulate an object or variable that hasn’t been...

XML External Entity (XXE) is a vulnerability that arises when an application parses XML input without properly restricting the use...

The app performs an authorization check when an actor attempts to access a resource or perform an action, but it...

Local File Inclusion (LFI) is a vulnerability that allows an adversary to include and execute files from the local file...

Try adjusting your search keywords or language filter.