Secure Coding Labs

Practice real-world secure coding scenarios through hands-on challenges and labs.

Remote Command Execution

critical CWE-88 javascript typescript electron

Remote Command Execution (RCE) is a critical security vulnerability that allows an adversary to execute arbitrary commands on a target...

medium

Hardcoded Credentials

medium swift kotlin ios android

Hardcoding secrets such as API keys, encryption keys, or sensitive credentials in mobile apps is a critical security risk because...

low

Insecure App Permissions

low kotlin swift android ios

Security misconfiguration in mobile apps arises from improperly configured security settings, permissions, or controls, creating vulnerabilities that can be exploited...

low

Insecure App Binary

low kotlin android

This vulnerability happen when the compiled app has insufficient binary protections. It allows an adversary to extract secrets, such as...

medium

Weak TLS

medium java android

If the in-transit data is sent in plaintext or via a deprecated encryption protocol, an adversary listening on the wire...

low

Insufficient Cryptography

low CWE-327 java swift android ios

Insufficient cryptography in mobile applications can be exploited by attackers to compromise the confidentiality, integrity, and authenticity of sensitive information....

medium

Insecure Biometric Authentication

medium java swift android ios

Insecure implementation of biometric authentication in mobile applications can expose users to significant security risks. Biometric authentication, such as fingerprint,...

high

Insecure LLM Plugin Execution

high artificial-inteligence flask

LLM plugins are extensions that operate automatically during user interactions and are driven entirely by the model, without application-level control...

low

Inadequate Privacy Controls

low CWE-359 java android

Privacy controls focus on safeguarding Personally Identifiable Information (PII), such as names, addresses, credit card details, e-mail and IP addresses,...

No matching labs found

Try adjusting your search keywords or language filter.