ewaldhorn/secure-code-review-challenges

This repo contains the code for my secure code review challenges

Java

Secure Code Review Challenges

This repo contains the code for my Secure Code Review challenges

Challenges

Open Redirect
SSRF
Weak Password Hashing
Hardcoded Credentials
XXE
XSS
Host Header Injection
Nginx Off-By-Slash
Broken Access Control
Broken Access Control (JWT missing verification)
Path Normalization Bypass
Unquoted Bash Variables
SQL Injection
Race Condition
HTTP Response Splitting
RCE via File Upload
OS Command Injection
Insecure Deserialization
...
...
...
...
...
...