The bearer of this certificate earned 300 total points
by completing secure coding labs through Veracode Security Labs.
Labs are a form of secure code training that
involves hands-on-keyboard
exercises, where users demonstrate their abilities to exploit and patch
code using real applications.
Matthias H&auml&#x3b;drich
0d7a05e438
28 Jun 2024
The following labs were completed toward certification:
| Lab Name | Topic Name | Language | Points |
|---|---|---|---|
| Bad Cookie Challenge | OWASP 2021 A1: Broken Access Control [DEPRECATED] |  NodeJS | 10 |
| Do You Remember? | Beyond OWASP Top 10: Other Web App Risks |  .NET | 10 |
| Helpful Stack Trace Challenge | OWASP 2021 A2: Cryptographic Failures [DEPRECATED] | .NET | 10 |
| Lesson Zero | Security Labs – Getting Started |  Java | 10 |
| Lesson Zero | Security Labs – Getting Started | NodeJS | 10 |
| Lesson Zero | Security Labs – Getting Started | .NET | 10 |
| Fix the Sessions | OWASP 2021 A1: Broken Access Control [DEPRECATED] | Java | 10 |
| Bugs in Debug | OWASP 2021 A2: Cryptographic Failures [DEPRECATED] | .NET | 10 |
| Own the Database | OWASP 2021 A3: Injection [DEPRECATED] | .NET | 10 |
| Parameterize all the things | OWASP 2021 A3: Injection [DEPRECATED] | .NET | 10 |
| Can you see your reflection? | OWASP 2021 A3: Injection [DEPRECATED] | .NET | 10 |
| Loose Lips Sink Servers | OWASP 2021 A1: Broken Access Control [DEPRECATED] | .NET | 10 |
| Secrets in the Log | OWASP 2021 A1: Broken Access Control [DEPRECATED] | Java | 10 |
| Stored XSS versus CSP | OWASP 2021 A3: Injection [DEPRECATED] | .NET | 20 |
| Check your sources | OWASP 2021 A3: Injection [DEPRECATED] | Java | 20 |
| Jot down this key | OWASP 2021 A5: Security Misconfiguration [DEPRECATED] | .NET | 10 |
| In a Pickle | OWASP 2021 A8: Software and Data Integrity Failures [DEPRECATED] | .NET | 10 |
| To Protect and To Serve Secure Cookies | OWASP 2021 A1: Broken Access Control [DEPRECATED] | NodeJS | 10 |
| Get there from here | OWASP 2021 A10: Server-Side Request Forgery [DEPRECATED] | .NET | 10 |
| eXternal Entity (injection) | OWASP 2021 A5: Security Misconfiguration [DEPRECATED] | .NET | 10 |
| Bobby Tables Challenge | OWASP 2021 A3: Injection [DEPRECATED] | .NET | 10 |
| Tell Mongo "no-go" for untrusted code | OWASP 2021 A8: Software and Data Integrity Failures [DEPRECATED] | NodeJS | 10 |
| Making Secure Decisions | OWASP 2021 A4: Insecure Design [DEPRECATED] | .NET | 10 |
| Mongo: like SQL, but messier | OWASP 2021 A8: Software and Data Integrity Failures [DEPRECATED] | NodeJS | 10 |
| Secret Admin Challenge | OWASP 2021 A5: Security Misconfiguration [DEPRECATED] | .NET | 10 |
| XML is always a... Challenge | OWASP 2021 A5: Security Misconfiguration [DEPRECATED] | .NET | 10 |
| Redirect Rodeo | OWASP 2021 A1: Broken Access Control [DEPRECATED] | .NET | 10 |
| Prototype Protection Agency | OWASP 2021 A8: Software and Data Integrity Failures [DEPRECATED] | NodeJS | 10 |