OWASP/SecureCodingDojo

Issues

• A shortcut for Second Degree Black Belt - Using Components with Known Vulnerabilities & Insecure Deserialization

  #154 opened 4 months ago by axqd
  0

• Second Degree Black Belt : Broken Authentication & Broken Access Control - View the chat messages

  #153 opened 4 months ago by assafv
  0

• Second Degree Black Belt : XML External Entities environment hostname is not getting set

  #139 opened a year ago by bilalk88
  3

• Feature request: k8s friendly handling of config.json and localUser.json

  #150 opened 5 months ago by ekelson-bcove
  0

• The example used for snipXSS3.jsp does not seem correct

  #149 opened 6 months ago by dingjiedanielyang-sec
  0

• Insecure.inc - cwe89.jsp

  #104 opened 2 years ago by anonymous-commits
  6

• CWE22 - Path Traversal accetps a wrong answer

  #25 opened 5 years ago by jose-raul-barreras
  3

• Integration of Codereview101 into Training Portal

  #147 opened 9 months ago by xuantien177
  0

• Connection timed out - Error code 522

  #146 opened 10 months ago by WolfMan12333
  2

• Slack Integration using unmaintained passport-slack

  #144 opened 10 months ago by vevinkirk
  1

• Insecure Inc Demo Portal EC2 instances down?

  #142 opened 10 months ago by delucia
  1

• securecodingdojo/insecure.inc container restarting

  #135 opened a year ago by bilalk88
  0

• Development changes are not pushed into the platform

  #116 opened a year ago by Rogatiq
  2

• Unknown Error after completing CSRF challenge on Blackbelt module

  #118 opened a year ago by nate-242
  1

• Bypass Challenges for Learners

  #117 opened a year ago by wyrmboy12
  6

• Play button not displayed in Red Team/Blue Team lessons

  #120 opened a year ago by AlexisCesar
  1

• 502 Bad Gateway error after import a CSV file to get a report

  #119 opened a year ago by gianoni
  2

• Access to enhanced Modules

  #110 opened 2 years ago by xrayn
  1

• Will it support AAD integration to login

  #114 opened 2 years ago by Jun-Zhu-Trend
  2

• Play button for Red Team module not available?

  #113 opened 2 years ago by sdushantha
  2

• Hosting of Security Code Review Ninja

  #115 opened 2 years ago by Rogatiq
  2

• Running buildImage.sh doesn't result a WAR file

  #112 opened 2 years ago by Rogatiq
  2

• Please update the images in Dockerhub ? :)

  #109 opened 2 years ago by alexku7
  4

• Update Training Syllabus to OWASP Top 10 2021

  #107 opened 2 years ago by danieldavidson
  3

• Rename MASTER_PASSWORD in Buffer Overflow challenge

  #102 opened 2 years ago by paul-ion
  0

• [Leaderboardctrl. js]upgrade of this file caused the dashboard N/A to be empty

  #108 opened 2 years ago by vincente-ren
  0

• Password Reset

  #101 opened 2 years ago by jalderm
  0

• Quiz lists Heartbleed as CWE-807

  #54 opened 3 years ago by MisterL2
  1

• "Insecure Deserialisation" exercise not included in the programme and with wrong CWE

  #56 opened 3 years ago by MisterL2
  0

• Mixing RSA encryption with RSA signatures

  #58 opened 4 years ago by ocalex86
  0

• Red Team / Blue Team

  #36 opened 4 years ago by paul-ion
  0

• Code Review 101 - Multi language support

  #23 opened 5 years ago by paul-ion
  1

• Code Review 101 - Change definition file from JSON to YAML

  #22 opened 5 years ago by paul-ion
  0

• Code Review 101 - Refactor to allow other modules (Infrastructure as Code)

  #21 opened 5 years ago by paul-ion
  0

• Authentication Broken by Main HTML Caching

  #18 opened 5 years ago by paul-ion
  0

• "SyntaxError: Unexpected end of JSON input" when runing in Docker

  #12 opened 5 years ago by marevalo10
  12

• Error running Server.JS

  #11 opened 5 years ago by cabbagehead
  13

• OWASP Wiki - Secure Coding Dojo

  #16 opened 5 years ago by nanzggits
  1

• encryptConfigs.js Error

  #15 opened 5 years ago by cabbagehead
  2

• Unrecognized command

  #14 opened 5 years ago by cabbagehead
  1

• encryptConfigs.js is in the tools directory and errors out

  #10 opened 5 years ago by cabbagehead
  2

• challengeSecrets.jsaon.sample is missing

  #8 opened 5 years ago by cabbagehead
  1

• encryptConfigs.js is in the tools directory and errors out

  #9 opened 5 years ago by cabbagehead
  1

• SQLite Support Broken for DB version 5

  #7 opened 5 years ago by paul-ion
  1

• Master salt breaks password guessing challenge

  #6 opened 6 years ago by paul-ion
  0

• Local authentication broken

  #5 opened 6 years ago by paul-ion
  1