The bearer of this certificate earned 300 total points
by completing secure coding labs through Veracode Security Labs.
Labs are a form of secure code training that
involves hands-on-keyboard
exercises, where users demonstrate their abilities to exploit and patch
code using real applications.
Ethan Pajimna
0c3038c605
19 Aug 2026
The following labs were completed toward certification:
| Lab Name | Topic Name | Language | Points |
|---|---|---|---|
| Really, really bad passwords | OWASP API 2: Broken Authentication |  NodeJS | 10 |
| One ID to Access All Objects | OWASP API 1: Broken Object Level Authorization | NodeJS | 10 |
| Terrible Password Challenge | OWASP API 2: Broken Authentication | NodeJS | 10 |
| Retrieval Without Validation | OWASP API 7: Server-Side Request Forgery [SSRF] | NodeJS | 10 |
| Stronger IDs | OWASP API 1: Broken Object Level Authorization | NodeJS | 10 |
| The Great Referral Quest | OWASP API 6: Unrestricted Access to Sensitive Business Flows | NodeJS | 10 |
| Slow Down | OWASP API 2: Broken Authentication | NodeJS | 10 |
| Brute Force Challenge | OWASP API 2: Broken Authentication | NodeJS | 10 |
| Bugs in Debug | OWASP API 3: Broken Object Property Level Authorization | NodeJS | 10 |
| Revealing Schemas | OWASP API 3: Broken Object Property Level Authorization | NodeJS | 10 |
| Bad Design Compromises Security | OWASP API 3: Broken Object Property Level Authorization | NodeJS | 10 |
| Neglected endpoints | OWASP API 5: Broken Function Level Authorization | NodeJS | 10 |
| Denial of Service | OWASP API 4: Unrestricted Resource Consumption | NodeJS | 10 |
| To Protect and to Serve Secure Cookies | OWASP 1: Broken Access Control |  Python Django | 20 |
| Get There from Here | OWASP 1: Broken Access Control | Python Django | 10 |
| Loose Lips Sink Servers | OWASP 1: Broken Access Control | NodeJS | 10 |
| Forging User Requests | OWASP 1: Broken Access Control | Python Django | 10 |
| Fix the Sessions | OWASP 1: Broken Access Control |  Java | 10 |
| Redirect Rodeo | OWASP 1: Broken Access Control |  .NET | 10 |
| Secrets in the Log | OWASP 1: Broken Access Control | Java | 10 |
| Jot down this key | OWASP 2: Security Misconfiguration | NodeJS | 20 |
| Can you keep a secret? | OWASP 2: Security Misconfiguration | NodeJS | 10 |
| External Resolution Challenge | OWASP 2: Security Misconfiguration |  Python Flask | 10 |
| Bulky Updates | OWASP 2: Security Misconfiguration |  Rails | 10 |
| eXternal Entity (injection) | OWASP 2: Security Misconfiguration | NodeJS | 10 |
| XML is always a challenge Challenge | OWASP 2: Security Misconfiguration | Python Flask | 10 |
| Secret Admin Challenge | OWASP 2: Security Misconfiguration | Python Flask | 10 |
| Bad Cookie Challenge | OWASP 1: Broken Access Control | NodeJS | 10 |