The bearer of this certificate earned 200 total points
by completing secure coding labs through Veracode Security Labs.
Labs are a form of secure code training that
involves hands-on-keyboard
exercises, where users demonstrate their abilities to exploit and patch
code using real applications.
Spencer Karenbauer
f1cc40bf9f
07 Nov 2023
The following labs were completed toward certification:
| Lab Name | Topic Name | Language | Points |
|---|---|---|---|
| Really, really bad passwords [DEPRECATED] | OWASP 2017 A2: Broken Authentication [DEPRECATED] |  Python Django | 10 |
| Hash it, store it, salt - upgrade it [DEPRECATED] | OWASP 2017 A2: Broken Authentication [DEPRECATED] | Python Django | 10 |
| Valid Deficit | OWASP 2021 A4: Insecure Design [DEPRECATED] |  Java | 10 |
| Forging user requests | General Application Security: CWE-352 Cross-Site Request Forgery | Python Django | 10 |
| Can you see your reflection? [DEPRECATED] | OWASP 2017 A7: Cross-Site Scripting (XSS) [DEPRECATED] | Java | 10 |
| Really, really bad passwords [DEPRECATED] | OWASP 2017 A2: Broken Authentication [DEPRECATED] |  .NET | 10 |
| Really, really bad passwords [DEPRECATED] | OWASP 2017 A2: Broken Authentication [DEPRECATED] | Java | 10 |
| One ID to Access All Objects [DEPRECATED] | OWASP 2019 API 1: Broken Object Level Authorization [DEPRECATED] | .NET | 10 |
| Reflected XSS and input formatting [DEPRECATED] | OWASP 2017 A7: Cross-Site Scripting (XSS) [DEPRECATED] |  Rails | 10 |
| Stronger IDs [DEPRECATED] | OWASP 2019 API 1: Broken Object Level Authorization [DEPRECATED] | .NET | 10 |
| Neglected endpoints [DEPRECATED] | OWASP 2019 API 5: Broken Function Level Authorization [DEPRECATED] | .NET | 10 |
| Own the database [DEPRECATED] | OWASP 2017 A1: Injection [DEPRECATED] | Python Django | 10 |
| Down with Uploads [DEPRECATED] | OWASP 2017 A7: Cross-Site Scripting (XSS) [DEPRECATED] |  Scala | 10 |
| Own the database [DEPRECATED] | OWASP 2017 A1: Injection [DEPRECATED] |  NodeJS | 10 |
| Own the database [DEPRECATED] | OWASP 2017 A1: Injection [DEPRECATED] |  PHP | 10 |
| Parameterize all the things [DEPRECATED] | OWASP 2017 A1: Injection [DEPRECATED] | NodeJS | 10 |
| Parameterize all the things [DEPRECATED] | OWASP 2017 A1: Injection [DEPRECATED] | Python Django | 10 |
| Stored XSS versus CSP [DEPRECATED] | OWASP 2017 A7: Cross-Site Scripting (XSS) [DEPRECATED] | NodeJS | 20 |
| Own the database [DEPRECATED] | OWASP 2017 A1: Injection [DEPRECATED] | Java | 10 |