Secure Coding Resources

Grow your secure coding skills with training, remediation advice, and coding competitions.

Go to:     Mitigation    |    AppSec Tutorials    |     Secure Coding Challenge     |     Developer Training Webinars   

Mitigation Tutorials

Learn how mitigation differs from remediation, and when it's appropriate to mitigate a flaw. You will also learn how to create effective mitigation proposals, and how the TSRV format helps with writing them. By the end of this training, you will have a solid grasp of the idea of mitigations.

 

Mitigations, Part 1: What is a Mitigation?

Mitigations, Part 2: Creating Mitigation Proposals

Mitigations, Part 3: Example Mitigation Proposals

AppSec Tutorials

Scanning is only half the battle; fixing and preventing flaws as well wins the war. Watch this video series where the Veracode Application Security Consultants walked you through the most common vulnerabilities and how to remediate them.


Need help to fix flaws?

Get advice from the experts in the How to Fix Flaws forum.

 

CRLF Injection Tutorial

CRLF Injection Tutorial

Information Leakage Tutorial

Information Leakage Tutorial

Open Redirects Tutorial

Open Redirects Tutorial

OS Command Injection Tutorial

OS Command Injection Tutorial

XSS Tutorial

XSS Tutorial

Secure Coding Challenge

Put your skills to the test and compete with other Community members in the monthly Secure Coding Challenge. You'll use Veracode Security Labs to explore top security risks and hone your secure coding skills. Security Labs allows you to exploit and patch up insecure code in real-world web applications.


There are no upcoming challenges at this time.

Dates - July 19-31, 2021

Topic - SQL Injection

Prizes - Intel Compute Stick, Secure Coder socks, and more

Register - Sign up now

 

 

Developer Training Webinars

Join the webinars where the Application Security Consultants took a deep dive into the most common vulnerabilities and demonstrated how to avoid them.

This webinar series is available for customers with Premier+ Support package only. If you have questions about the webinars, please email jjastrzebski@veracode.com.

 

Recorded

Cross-Site Scripting (Java)

Explore the perennial threat of XSS, an extremely common web application vulnerability. Presented using a Java application and code base.

Recorded

SQL Injection (Java)

Learn about SQL Injection, an age-old yet still rampant security risk. Presented using a Java application and code base.

Recorded

Cross-Site Scripting (.NET)

Explore the perennial threat of XSS, an extremely common web application vulnerability. Presented using a .NET application and code base.

Recorded

Cross-Site Scripting (Java)

Explore the perennial threat of XSS, an extremely common web application vulnerability. Presented using a Java application and code base.

Recorded

SQL Injection (.NET)

Learn about SQL Injection, an age-old yet still rampant security risk. Presented using a .NET application and code base.



Up for a Challenge?