The bearer of this certificate earned 300 total points
by completing secure coding labs through Veracode Security Labs.
Labs are a form of secure code training that
involves hands-on-keyboard
exercises, where users demonstrate their abilities to exploit and patch
code using real applications.
Shaik Irfan
fdb83fd083
19 Jun 2025
The following labs were completed toward certification:
| Lab Name | Topic Name | Language | Points |
|---|---|---|---|
| Retrieval Without Validation | OWASP API 7: Server-Side Request Forgery [SSRF] |  NodeJS | 10 |
| Retrieval Without Validation | OWASP API 7: Server-Side Request Forgery [SSRF] |  .NET | 10 |
| Gift Cards at Risk | OWASP API 10: Unsafe Consumption of APIs | NodeJS | 10 |
| Retrieval Without Validation | OWASP API 7: Server-Side Request Forgery [SSRF] |  Java | 10 |
| Do You Remember? | Beyond OWASP Top 10: Other Web App Risks | .NET | 10 |
| The Art of Redirection | General Application Security: CWE-601 Open Redirects | NodeJS | 10 |
| Unprotected Deployments | OWASP API 9: Improper Inventory Management | Java | 10 |
| Logging in the API Infrastructure | More OWASP Vulnerabilities for APIs | Java | 10 |
| Own the database | More OWASP Vulnerabilities for APIs | Java | 10 |
| Parameterize all the things | More OWASP Vulnerabilities for APIs | Java | 10 |
| Bobby Tables Challenge | More OWASP Vulnerabilities for APIs | Java | 10 |
| PII Storage | General Application Security: User Data Privacy | NodeJS | 10 |
| Parameterize all the things | OWASP 2021 A3: Injection [DEPRECATED] | Java | 10 |
| See-through traffic | General Application Security: CWE-319 Cleartext Transmission of Sensitive Data | NodeJS | 10 |
| Own the Database | OWASP 2021 A3: Injection [DEPRECATED] | NodeJS | 10 |
| Own the Database | OWASP 2021 A3: Injection [DEPRECATED] | Java | 10 |
| Can you see your reflection? | OWASP 2021 A3: Injection [DEPRECATED] | Java | 10 |
| Can you see your reflection? | OWASP 2021 A3: Injection [DEPRECATED] | NodeJS | 10 |
| Check your sources | OWASP 2021 A3: Injection [DEPRECATED] | Java | 20 |
| The Importance of Logging and Monitoring | More OWASP Vulnerabilities for APIs | Java | 10 |
| Suspicious Packages | OWASP 2021 A6: Vulnerable and Outdated Components [DEPRECATED] | Java | 10 |
| Suspicious Packages | OWASP 2021 A6: Vulnerable and Outdated Components [DEPRECATED] | NodeJS | 10 |
| Slow Down | OWASP 2021 A9: Security Logging and Monitoring Failures [DEPRECATED] | Java | 10 |
| Stored XSS versus CSP | OWASP 2021 A3: Injection [DEPRECATED] | NodeJS | 20 |
| Hold the Line | OWASP 2021 A9: Security Logging and Monitoring Failures [DEPRECATED] | Java | 10 |
| Persistence Challenge | OWASP 2021 A3: Injection [DEPRECATED] | NodeJS | 20 |
| Outdated Dependencies Challenge | OWASP 2021 A6: Vulnerable and Outdated Components [DEPRECATED] | Java | 10 |