LAB 316 – Defending TypeScript Applications Against Hard-coded Credentials

Course Overview

A Hard-coded Credentials vulnerability is a security flaw that occurs when an application stores authentication credentials within its code instead of in a secure credential store. The hard-coded credentials cannot be disabled or changed, granting unauthorized access to attackers who have recovered them, posing a significant risk to the application’s security. If attackers gain access to the application’s code, they can recover these credentials, compromising security. To mitigate this vulnerability, developers should remove any code that implements authentication using hard-coded values and instead implement authentication that uses safely stored credentials.

The Defending TypeScript Skill Lab provides developers with a virtual environment to identify and remediate Hard-coded Credentials vulnerabilities. Learners will gain hands-on experience testing for the vulnerability and implementing proper mitigation, such as removing the authentication code that uses hard-coded credentials and replacing it with industry best practices.