The bearer of this certificate earned 300 total points
by completing secure coding labs through Veracode Security Labs.
Labs are a form of secure code training that
involves hands-on-keyboard
exercises, where users demonstrate their abilities to exploit and patch
code using real applications.
The following labs were completed toward certification:
| Lab Name | Topic Name | Language | Points |
|---|---|---|---|
| Slow Down | OWASP API 2: Broken Authentication |  NodeJS | 10 |
| Brute Force Challenge | OWASP API 2: Broken Authentication | NodeJS | 10 |
| Lesson Zero | Security Labs – Getting Started | NodeJS | 10 |
| To Protect and to Serve Secure Cookies | OWASP 1: Broken Access Control | NodeJS | 10 |
| Loose Lips Sink Servers | OWASP 1: Broken Access Control | NodeJS | 10 |
| Redirect Rodeo | OWASP 1: Broken Access Control | NodeJS | 10 |
| Forging User Requests | OWASP 1: Broken Access Control |  Python Django | 10 |
| Fix the Sessions | OWASP 1: Broken Access Control |  Java | 10 |
| Secrets in the Log | OWASP 1: Broken Access Control | Java | 10 |
| Get There from Here | OWASP 1: Broken Access Control | NodeJS | 10 |
| Jot down this key | OWASP 2: Security Misconfiguration | NodeJS | 20 |
| Can you keep a secret? | OWASP 2: Security Misconfiguration | NodeJS | 10 |
| External Resolution Challenge | OWASP 2: Security Misconfiguration |  Python Flask | 10 |
| Suspicious Packages | OWASP 3: Software Supply Chain Failures | NodeJS | 10 |
| Insufficient Entropy | OWASP 4: Cryptographic Failures | NodeJS | 10 |
| Secret Logging Challenge | OWASP 4: Cryptographic Failures | Python Flask | 10 |
| Own the database | OWASP 5: Injection | NodeJS | 10 |
| Timing is everything Challenge | OWASP 5: Injection | Python Django | 10 |
| Can you see your reflection? | OWASP 5: Injection | NodeJS | 10 |
| Check your sources | OWASP 5: Injection | Python Django | 20 |
| Down with Uploads | OWASP 5: Injection | NodeJS | 20 |
| Reflected XSS and input formatting | OWASP 5: Injection |  Rails | 10 |
| Angular ERB sanitization | OWASP 5: Injection | Rails | 10 |
| Valid Deficit | OWASP 6: Insecure Design | NodeJS | 10 |
| Angular HTML and URL sanitization | OWASP 5: Injection | Rails | 10 |
| Really, really bad passwords | OWASP 7: Authentication Failures | Python Django | 10 |
| Hash it, store it, salt - upgrade it | OWASP 7: Authentication Failures | NodeJS | 10 |
| Hold the Line | OWASP 9: Security Logging & Alerting Failures | NodeJS | 10 |
| Prototype Protection Agency | OWASP 8: Software or Data Integrity Failures | NodeJS | 10 |
| In a Pickle | OWASP 8: Software or Data Integrity Failures | NodeJS | 10 |
| Slow Down | OWASP 9: Security Logging & Alerting Failures | NodeJS | 10 |
| Sleeping With the Enemy | OWASP 8: Software or Data Integrity Failures | NodeJS | 10 |
| Brute Force Challenge | OWASP 9: Security Logging & Alerting Failures |  .NET | 10 |
| Fail Securely | OWASP 10: Mishandling of Exceptional Conditions | Java | 10 |
| Letting Go of the Outdated | OWASP 3: Software Supply Chain Failures | Java | 10 |
| Bulky Updates | OWASP 2: Security Misconfiguration | Rails | 10 |
| eXternal Entity (injection) | OWASP 2: Security Misconfiguration | NodeJS | 10 |
| XML is always a challenge Challenge | OWASP 2: Security Misconfiguration | .NET | 10 |
| Bugs in Debug | OWASP 4: Cryptographic Failures | NodeJS | 10 |
| Outdated Dependencies Challenge | OWASP 3: Software Supply Chain Failures | Python Flask | 10 |
| Helpful Stack Trace Challenge | OWASP 4: Cryptographic Failures | .NET | 10 |
| Parameterize all the things | OWASP 5: Injection | NodeJS | 10 |
| Bobby Tables Challenge | OWASP 5: Injection | NodeJS | 10 |
| Stored XSS versus CSP | OWASP 5: Injection | NodeJS | 20 |
| Alert Challenge | OWASP 5: Injection | NodeJS | 10 |
| Persistence Challenge | OWASP 5: Injection | NodeJS | 20 |
| Making Secure Decisions | OWASP 6: Insecure Design | NodeJS | 10 |
| Authentication Bypass | OWASP 7: Authentication Failures | NodeJS | 10 |
| User-Provided Users | OWASP 8: Software or Data Integrity Failures | NodeJS | 10 |
| Terrible Password Challenge | OWASP 7: Authentication Failures | NodeJS | 10 |
| Deserialization Challenge | OWASP 8: Software or Data Integrity Failures | NodeJS | 10 |
| Mongo: like SQL, but messier | OWASP 8: Software or Data Integrity Failures | NodeJS | 10 |
| Tell Mongo "no-go" for untrusted code | OWASP 8: Software or Data Integrity Failures | NodeJS | 10 |
| Secret Admin Challenge | OWASP 2: Security Misconfiguration | .NET | 10 |
| Bad Cookie Challenge | OWASP 1: Broken Access Control | NodeJS | 10 |