The bearer of this certificate earned 200 total points
by completing secure coding labs through Veracode Security Labs.
Labs are a form of secure code training that
involves hands-on-keyboard
exercises, where users demonstrate their abilities to exploit and patch
code using real applications.
Damian Śnieżek
963d2642e3
05 Mar 2021
The following labs were completed toward certification:
| Lab Name | Topic Name | Language | Points |
|---|---|---|---|
| Timing is everything [DEPRECATED] Challenge | OWASP 2017 A1: Injection [DEPRECATED] |  Python Django | 10 |
| No Going Back Challenge | General Application Security: CWE-601 Open Redirects |  NodeJS | 10 |
| Slow Down [DEPRECATED] | OWASP 2017 A10: Insufficient Logging + Monitoring [DEPRECATED] | Python Django | 10 |
| The Art of Redirection | General Application Security: CWE-601 Open Redirects | NodeJS | 10 |
| Slow Down [DEPRECATED] | OWASP 2017 A10: Insufficient Logging + Monitoring [DEPRECATED] |  Java | 10 |
| Really, really bad passwords [DEPRECATED] | OWASP 2017 A2: Broken Authentication [DEPRECATED] | Java | 10 |
| In a Pickle [DEPRECATED] | OWASP 2017 A8: Insecure Deserialization [DEPRECATED] | Java | 10 |
| External Resolution [DEPRECATED] Challenge | OWASP 2017 A4: XML External Entities (XXE) [DEPRECATED] |  Python Flask | 10 |
| Parameterize all the things [DEPRECATED] | OWASP 2017 A1: Injection [DEPRECATED] | Java | 10 |
| Bobby Tables [DEPRECATED] Challenge | OWASP 2017 A1: Injection [DEPRECATED] | Java | 10 |
| Mongo: like SQL, but messier [DEPRECATED] | OWASP 2017 A8: Insecure Deserialization [DEPRECATED] | NodeJS | 10 |
| Tell Mongo "no-go" for untrusted code [DEPRECATED] | OWASP 2017 A8: Insecure Deserialization [DEPRECATED] | NodeJS | 10 |
| User-Provided Users [DEPRECATED] | OWASP 2017 A8: Insecure Deserialization [DEPRECATED] |  Rails | 10 |
| In a Pickle [DEPRECATED] | OWASP 2017 A8: Insecure Deserialization [DEPRECATED] | Python Flask | 10 |
| Deserialization [DEPRECATED] Challenge | OWASP 2017 A8: Insecure Deserialization [DEPRECATED] | Python Flask | 10 |
| XML is always a challenge [DEPRECATED] Challenge | OWASP 2017 A4: XML External Entities (XXE) [DEPRECATED] | Python Django | 10 |
| Brute Force [DEPRECATED] Challenge | OWASP 2017 A10: Insufficient Logging + Monitoring [DEPRECATED] | Python Flask | 10 |
| Own the database [DEPRECATED] | OWASP 2017 A1: Injection [DEPRECATED] | Java | 10 |
| eXternal Entity (injection) [DEPRECATED] | OWASP 2017 A4: XML External Entities (XXE) [DEPRECATED] | Java | 10 |
| Suspicious Packages [DEPRECATED] | OWASP 2017 A9: Using Components with Known Vulnerabilities [DEPRECATED] | Java | 10 |