Secure Coding Labs

Practice real-world secure coding scenarios through hands-on challenges and labs.

EC2 Metadata Insecure

The EC2 Metadata Service (IMDS) lacks authentication, posing a risk of unauthorised access to sensitive services. Adversaries could extract valuable...

informational

Loadbalancer HTTP allowed

informational CWE-319 aws

Using plain HTTP is insecure, as it transmits data in an unencrypted and readable format. This weakness exposes data to...

critical

VPC Unrestricted Ingress

critical CWE-284 aws

Not restricting ingress allows connections from the public internet on any port and host, significantly increasing the extent of a...

high

VPC Unrestricted Egress

high CWE-284 aws

Not restricting egress allows connections to the public internet on any port and host, significantly increasing the extent of a...

informational

Cloudfront Insufficient Logging

informational CWE-778 aws

Insufficient logging makes it difficult to detect suspicious attempts, potentially allowing security intrusions to go undetected for an extended period....

informational

Cloudfront HTTP allowed

informational CWE-319 aws

Using plain HTTP is insecure, as it transmits data in an unencrypted and readable format. This weakness exposes data to...

informational

Cloudfront without WAF

informational aws

Web Application Firewall (WAF) should be setup in front of Cloudfront to mitigate various types of web attacks. Remediation Enable...

medium

ECR Public

medium CWE-284 aws

Private or sensitive images are exposed to the public if ECR's public access is not blocked. Remediation Do not allow...

informational

ECR Image Mutable

informational aws

To prevent malicious modification of existing container images, image tags must be set to immutable. Remediation Enable image immutability on...

No matching labs found

Try adjusting your search keywords or language filter.