Veracode Security Labs Champion Level 2 Certificate

The bearer of this certificate earned 200 total points by completing secure coding labs through Veracode Security Labs. Labs are a form of secure code training that involves hands-on-keyboard exercises, where users demonstrate their abilities to exploit and patch code using real applications.
The following labs were completed toward certification:
Lab NameTopic NameLanguagePoints
Forging user requests General Application Security: CWE-352 Cross-Site Request Forgery Python Django10
Really, really bad passwords [DEPRECATED] OWASP 2017 A2: Broken Authentication [DEPRECATED] .NET10
One ID to Access All Objects [DEPRECATED] OWASP 2019 API 1: Broken Object Level Authorization [DEPRECATED] .NET10
Parameterize all the things [DEPRECATED] OWASP 2017 A1: Injection [DEPRECATED] .NET10
Bugs in Debug [DEPRECATED] OWASP 2017 A3: Sensitive Data Exposure [DEPRECATED] .NET10
Can you see your reflection? [DEPRECATED] OWASP 2017 A7: Cross-Site Scripting (XSS) [DEPRECATED] .NET10
Down with Uploads [DEPRECATED] OWASP 2017 A7: Cross-Site Scripting (XSS) [DEPRECATED] .NET20
Stored XSS versus CSP [DEPRECATED] OWASP 2017 A7: Cross-Site Scripting (XSS) [DEPRECATED] .NET10
Lesson Zero Security Labs – Getting Started NodeJS10
Lesson Zero Security Labs – Getting Started .NET10
Neglected endpoints [DEPRECATED] OWASP 2019 API 5: Broken Function Level Authorization [DEPRECATED] .NET10
Own the database [DEPRECATED] OWASP 2017 A1: Injection [DEPRECATED] Python Django10
Loose Lips Sink Servers OWASP 2021 A1: Broken Access Control [DEPRECATED] .NET10
Know Your Limits Beyond OWASP Top 10: Other Web App Risks Java10
Denial of Service [DEPRECATED] OWASP 2019 API 4: Lack of Resources & Rate Limiting [DEPRECATED] .NET10
Valid Deficit OWASP 2021 A4: Insecure Design [DEPRECATED] .NET10
Bugs in Debug [DEPRECATED] OWASP 2017 A3: Sensitive Data Exposure [DEPRECATED] Python Django10
Bugs in Debug [DEPRECATED] OWASP 2017 A3: Sensitive Data Exposure [DEPRECATED] NodeJS10
Hash it, store it, salt - upgrade it [DEPRECATED] OWASP 2017 A2: Broken Authentication [DEPRECATED] NodeJS10