OWASP ASVS

COD 288 – Java Public Key Cryptography

20 Minutes

0.5 CPE

LAB 113 – Identifying Cryptographic Failures

5 Minutes

0.25 CPE

LAB 114 – Identifying Cookie Tampering

5 Minutes

0.25 CPE

LAB 115 – Identifying Reflective XSS

5 Minutes

0.25 CPE

LAB 116 – Identifying Forceful Browsing

5 Minutes

0.25 CPE

LAB 117 – Identifying Hidden Form Field

5 Minutes

0.25 CPE

LAB 118 – Identifying Weak File Upload Validation

5 Minutes

0.25 CPE

LAB 119 – Identifying Persistent XSS

5 Minutes

0.25 CPE

LAB 120 – Identifying XML Injection

5 Minutes

0.25 CPE

LAB 220 – Defending Against Hard-Coded Secrets

5 Minutes

0.25 CPE

LAB 221 – Defending C# Applications Against SQL Injection

10 Minutes

0.25 CPE

LAB 222 – Defending Python Applications Against SQL Injection

10 Minutes

0.25 CPE

LAB 223 – Defending Node.js Applications Against SQL Injection

10 Minutes

0.25 CPE

LAB 230 – Defending Java Applications Against XSS

15 Minutes

0.25 CPE

LAB 231 – Defending Python Applications Against XSS

15 Minutes

0.25 CPE

LAB 232 – Defending C# Applications Against XSS

15 Minutes

0.25 CPE

LAB 233 – Defending Node.js Applications Against XSS

15 Minutes

0.25 CPE

LAB 237 – Defending Java Applications Against SQL Injection

20 Minutes

0.5 CPE

LAB 240 – Defending Java Applications Against eXternal XML Entity (XXE) Vulnerabilities

10 Minutes

0.25 CPE

LAB 241 – Defending C# Applications Against eXternal XML Entity (XXE) Vulnerabilities

10 Minutes

0.25 CPE

LAB 242 – Defending Node.js Applications Against eXternal XML Entity (XXE) Vulnerabilities

10 Minutes

0.25 CPE

LAB 244 – Defending Java Applications Against Security Misconfiguration

12 Minutes

0.25 CPE

LAB 615 – ATT&CK: Updating Vulnerable Java Web Application Server Software

12 Minutes

0.25 CPE

LAB 621 – ATT&CK: Password Cracking

5 Minutes

0.25 CPE

LAB 622 – ATT&CK: Exploiting Windows File Sharing Server with External Remote Services

20 Minutes

0.5 CPE

LAB 623 – ATT&CK: Exploiting Vulnerable Java Web Application Server Software

12 Minutes

0.25 CPE

LAB 624 – ATT&CK: Exploiting Java Web Application Server Misconfiguration

12 Minutes

0.25 CPE

LAB 630 – ATT&CK: Exploiting Java SQL Injection to Extract Password Hashes

15 Minutes

0.25 CPE

SDT 317 – Testing for Improper Control of Generation of Code

10 Minutes

0.25 CPE

SDT 318 – Testing for Insufficiently Protected Credentials

10 Minutes

.25 CPE

SDT 319 – Testing for Out-of-bounds Read

10 Minutes

.25 CPE

SDT 320 – Testing for Out-of-bounds Write

10 Minutes

.25 CPE

SDT 321 – Testing for Uncontrolled Resource Consumption

10 Minutes

.25 CPE

SDT 322 – Testing for Improper Privilege Management

10 Minutes

.25 CPE

SDT 323 – Testing for Improper Input Validation

10 Minutes

.25 CPE

SDT 324 – Testing for Improper Restriction of Operations within the Bounds of a Memory Buffer

10 Minutes

.25 CPE

SDT 325 – Testing for NULL Pointer Dereference

10 Minutes

.25 CPE

SDT 326 – Testing for Use After Free

10 Minutes

.25 CPE

TST 206 – ASVS Requirements for Developers

20 Minutes

.5 CPE