Season Recap - 2025 (September to November)

Hey everyone ,

This last season was packed and the SecDim ecosystem saw a full slate of updates, releases, and experiments across our platform. Here’s a recap of what we rolled out over the last 3 months.

Black Friday Sale

Firstly, our Black Friday sale is live

Our annual Pro membership will be 35% off, The sale ends on 4th December 23:59 AEDT. If you’ve been considering it, get it now before it’s gone!

Use the coupon code: APPSECONABUDGET2025 at checkout

Patch Reward System

At SecDim, our focus is community first. Therefore, we launched the SecDim Patch Reward System, our new pipeline for sharing feedback on patch submissions. Players can now review one another’s fixes, vote on clean or insightful remediation, and surface elegant solutions. It turned challenge solving into a shared learning loop and boosted community-driven knowledge transfer.

MCP Server and Dr SecDim v2

The SecDim MCP Server shipped this season, exposing wargames, challenges, and support endpoints directly into compatible AI tooling. The idea was simple: make SecDim resources scriptable, automatable, and accessible from your development cockpit with minimal friction. The MCP Server was integrated into our existing AI Assistant: Dr SecDim, which now allows you to access the SecDim challenges database from the comfort of your IDE.

New Challenges and Cybersecurity Awareness Month WarGame

October hit, and so did our seasonal event. The Cybersecurity Awareness Month WarGame went live with challenge tracks covering AI, Python, Ruby, Aptos and Wargames. Veteran breakers, blue-team dabblers, and first-time explorers all got a chance to stress-test their skills against real-world patterns and the robustness of their patches against others.

We covered all the challenges featured in the Wargame, but additionally we released some more to our challenge Catalogue:

AI Challenges

• MCP Poison.ai

• MCP Tool Collision.ai

• MCP Tool Shadowing.ai

• MCP Line Jumping.ai

Python Challenges

• OAUTH.py

• Santa Message.py

• CSRF.py

PHP Challenges

• Solar.php.hth

• CSRF.php

Aptos Move Challenges

• DAO Governance.move

• Drain.move

• Arbitrage.move

• DAO DoS.move

• SmartTable.move

• ChaChash.move

Go Challenges

• Weekend League.go

• CSRF.go

JavaScript Challenges

• Slipstream.js

• Self Sabotage.js

• CSRF.js

Frontend Challenges

• React XSS.js

• React XSS2.js

• React XSS3.js

• Electron XSS.js

Ruby Challenges

• Insecure Normalization.rb

• CSRF.rb

Java Challenges

• CSRF.java

Incident Response Challenges

• Access Token Manipulation.ir

• Command and Scripting Interpreter.ir

• Supply Chain Compromise.ir

CI/CD Challenges

• Pin.github

• Curl Eval.github

• Script Injection.github

• Forbidden Command.github

• Secret Leak.github

• Data Exfiltration.github

• Target Code.github

• Outbound Calls.github

• Dependency Confusion.github

• ToCToU.github

Instructor Support

We’ve expanded our Hints feature with a new level of support: SecDim Instructor Support.

When working through a challenge, you can still unlock the built-in hints as usual. But now, you’ll also see an “Ask Instructor” option. Clicking it takes you straight to our Discuss forum and automatically opens a draft titled “I need help with ”.

This lets you directly reach our security experts for personalised guidance right when you need it.

Events

We have been over and around. If you are attending any of our upcoming events, come say Hi

Upcoming:
BSides London
NDC Manchester: Security & AI
BlackHat EU London

Past:
AppSec Village at DEFCON
Black Hat USA
SFF 2025
OWASP Singapore
OWASP New Zealand
BSides Lisbon

Up Next? Our 7x7 Holiday Wargame, Coming Soon!

TL;DR

• Black Friday Sale — Get 35% off, APPSECONABUDGET2025 ends 4th December 23:59 AEDT

• Cybersecurity Awareness Month WarGame — our seasonal wargame

• Patch Reward System — peer-review and kudos system for patch submissions

• MCP Server and Dr SecDimv2 — everything accessible from your AI tools

• New Challenges — Move, MCP, Frontend, CI/CD & more

• Ask Instructor — get support from our security experts.

• Events — BSides, NDC, Black Hat upcoming.

• 7x7 Holiday Wargame — Coming soon Mid December - January End

Happy Patching