Kotlin challenges mapped to the OWASP Top 10:2025

We now have Kotlin challenges on SecDim Play, mapped to the OWASP Top 10:2025.

Each challenge covers a security vulnerability. Your job is to find and fix it without breaking what the app does.

The challenges by OWASP category:

• A01 Broken Access Control: SSRF.kt, CSRF.kt, Bad token.kt, No Sutpo.kt, Steam.kt, Capital0.kt
• A02 Security Misconfiguration: Secret leak.kt, Energy.kt, No Sutpo.kt
• A04 Cryptographic Failures: Randomness.kt, JWT.kt, Bad token.kt
• A05 Injection: Command Injection.kt, SQL Injection.kt, Log Injection.kt, XSS.kt
• A06 Insecure Design: ReDos.kt, Energy.kt, Bad password.kt, Bad token.kt
• A07 Authentication Failures: JWT.kt, Bad password.kt, Bad token.kt, No Sutpo.kt, Energy.kt
• A09 Security Logging and Alerting Failures: Log Injection.kt
• A10 Mishandling of Exceptional Conditions: Integer Overflow.kt

See the full mapping: OWASP Top 10 (2025) Secure Coding Challenges in Kotlin | SecDim
Play the Kotlin game: Play - SecDim