Menu

    Practical Missions

    Avatar
    Secure Code Warrior Elves
    • Updated
    Follow

     

    Secure Code Warrior®  Missions simulate real-world scenarios for developers so they can experience the impact of insecure code and practice their offensive skills, making them better at defending their code and their company's brand reputation.


    Just like pilots using a flight simulator to learn to recognize and pre-empt risk, Missions do the same for developers, helping to increase their secure coding knowledge and prevent poor coding practices before they occur.

    Missions aren't for the faint of heart, but hints are available to provide some guidance when needed.

     

    Each Mission is an immersive simulation of a real-world app allowing developers to practice their secure coding skills in a safe environment.

    There are 72 missions playable +  7 Public missions. To see for yourself what your developers will experience, check out our publically available mission, found here: https://www.securecodewarrior.com/lp/fly-a-test-mission



    Covered Vulnerabilities

      1. Access Control - Insecure Direct Object Reference
      2. Access Control - Missing Function Level Access Control
      3. Access Control - Missing Object Level Access Control
      4. Authentication - Improper Authentication
      5. Authentication - Insecure Password Reset Function
      6. Business Logic - Insufficient Validation
      7. Cross-Site Request Forgery - Cross-Site Request Forgery
      8. Cross-Site Scripting (XSS) - DOM-Based Cross-Site Scripting
      9. Cross-Site Scripting (XSS) - Reflected Cross-Site Scripting
      10. Cross-Site Scripting (XSS) - Stored Cross-Site Scripting
      11. Information Exposure - Error Details
      12. Information Exposure - Security Misconfiguration
      13. Information Exposure - Sensitive Data Exposure
      14. Injection Flaws - Deserialization of Untrusted Data
      15. Injection Flaws - External Entity Injection
      16. Injection Flaws - NoSQL Injection
      17. Injection Flaws - OS Command Injection
      18. Injection Flaws - Path Traversal
      19. Injection Flaws - SQL Injection
      20. Insufficient Logging and Monitoring - Insufficient Logging and Monitoring
      21. Mass Assignment - Mass Assignment
      22. Security Misconfiguration - Debug Features Enabled
      23. Security Misconfiguration - Other
      24. Sensitive Data Storage - Plaintext Storage of Passwords
      25. Server-Side Request Forgery - Server-Side Request Forgery (SSRF)
      26. Session Handling - Weak Session Token Generation

    Covered Languages: frameworks

    1. C: Basic
    2. C# (.NET): Basic
    3. C# (.NET): Core
    4. C# (.NET): MVC
    5. C# (.NET): Web API
    6. C# (.NET): Web Forms
    7. C++:Basic
    8. GO: API
    9. GO: Basic
    10. Java: Enterprise Edition (Basic)
    11. Java: Enterprise Edition (JSF)
    12. Java: Enterprise Edition (JSP)
    13. Java: Enterprise Edition API
    14. Java: Spring
    15. Java: Spring API
    16. Javascript: Angular.io(2+)
    17. JavaScript: Basic
    18. JavaScript: Node.js (Express)
    19. JavaScript: Node.js API
    20. Javascript: React
    21. Javascript: Vue.js
    22. Kotlin: Spring API
    23. Perl Dancer 2
    24. PHP: Basic
    25. PHP: Symfony
    26. Pseudocode: Web
    27. Python: API
    28. Python: Basic
    29. Python: Django
    30. Python: Flask
    31. Ruby: Rails
    32. SAP: ABAP
    33. Scala: Play

     

    Related Links:

    Related articles

    Comments

    0 comments

    Please sign in to leave a comment.