Menu

    Instructional Walkthroughs

    Avatar
    Secure Code Warrior Elves
    • Updated
    Follow


    Secure Code Warrior® Walkthroughs simulate real-world scenarios for every developer to experience the impact of insecure code while helping them answer the question "why does this vulnerability matter?" - ultimately allowing them to defend their code and company's brand reputation.


    Each Walkthrough has explicit step-by-step instructions to guide developers as they interact with an application and experience how the vulnerability manifests itself in a real-world scenario.

     

     

    Covered Vulnerabilities

    1. Access Control - Insecure Direct Object Reference
    2. Access Control - Missing Function Level Access Control
    3. Authentication - Improper Authentication
    4. Business Logic - Insufficient Validation
    5. Cross-Site Scripting (XSS) - Reflected Cross-Site Scripting
    6. Cross-Site Scripting (XSS) - Stored Cross-Site Scripting
    7. File Upload Vulnerability - Unrestricted File Upload
    8. Injection Flaws - Deserialisation of Untrusted Data
    9. Injection Flaws - External Entity Injection
    10. Injection Flaws - NoSQL Injection
    11. Injection Flaws - OS Command Injection
    12. Injection Flaws - Path Traversal
    13. Injection Flaws - SQL Injection
    14.  Insecure Cryptography - Insecure Randomness
    15. Insecure Cryptography - Weak Algorithm Use
    16. Insufficient Logging and Monitoring - Insufficient Logging and Monitoring
    17. Mass Assignment - Mass Assignment
    18. Security Misconfiguration - Disabled Security Features
    19. Sensitive Data Storage - Plain text Storage of Passwords
    20. Server-Side Request Forgery - Server-Side Request Forgery (SSRF)
    21. Session Handling - Exposed Session Tokens
    22. Vulnerable Components - Using Known Vulnerable Components
    23. Vulnerable Components - Using Components From Untrusted Source
    24. XML External Entities (XXE) - XML External Entities (XXE)

    Covered Languages: Frameworks

    1. C: Basic
    2. C#(.NET): Basic
    3. C# (.NET): Core
    4. C# (.NET): MVC
    5. C# (.Net): Web API
    6. C# (.NET): Web Forms
    7. C++: Basic
    8. CloudFormation: Basic
    9. Docker: Basic
    10. GO: API
    11. GO: Basic
    12. Java: Enterprise Edition (Basic)
    13. Java: Enterprise Edition (JSF)
    14. Java: Enterprise Edition (JSP)
    15. Java: Enterprise Edition API
    16. Java: Servlets
    17. Java: Spring
    18. Java: Spring API
    19. Java: Struts
    20. JavaScript: Angular.io (2+)
    21. JavaScript: Basic
    22. JavaScript: Node.js (Express)
    23. JavaScript: Node.js API
    24. JavaScript: React
    25. JavaScript: Vue.js
    26. Kotlin: Spring API
    27. Kubernetes: Basic
    28. Perl Dancer 2
    29. PHP: Basic
    30. PHP: Laravel
    31. PHP: Symfony
    32. Pseudocode: Web
    33. Python: API
    34. Python: Basic
    35. Python: Django
    36. Python: Flask
    37. Ruby: Rails
    38. Rust: Basic
    39. SAP: ABAP
    40. Scala: Play
    41. Terraform: Basic
    42. Typescript:Basic

     

    Related Link:

    Related articles

    Comments

    0 comments

    Please sign in to leave a comment.