|
Security Standards Prerequisites
|
Essentials - Security Standards |
20 |
|
|
Security Bugs Prerequisites
|
Essentials - Security Bugs |
20 |
|
|
Secret Management Prerequisites
|
Essentials - Secret Management |
20 |
|
|
Data Classification Prerequisites
|
Essentials - Data Classification |
20 |
|
|
Privacy Policy Inspection
|
Security through Obscurity |
450 |
|
|
GDPR Data Erasure
|
Broken Authentication |
450 |
|
|
Bjoern's Favorite Pet
|
Broken Authentication |
450 |
|
|
Login Bender
|
Injection |
450 |
|
|
Login Jim
|
Injection |
450 |
|
|
Login Amy
|
Sensitive Data Exposure |
450 |
|
|
Deluxe Fraud
|
Improper Input Validation |
450 |
|
|
Payback Time
|
Improper Input Validation |
450 |
|
|
Admin Registration
|
Improper Input Validation |
450 |
|
|
Forged Review
|
Broken Access Control |
450 |
|
|
Forged Feedback
|
Broken Access Control |
450 |
|
|
Database Schema
|
Injection |
450 |
|
|
CAPTCHA Bypass
|
Broken Anti Automation |
450 |
|
|
Password Strength
|
Broken Authentication |
250 |
|
|
Deprecated Interface
|
Security Misconfiguration |
250 |
|
|
View Basket
|
Broken Access Control |
250 |
|
|
Error Handling
|
Security Misconfiguration |
100 |
|
|
Repetitive Registration
|
Improper Input Validation |
100 |
|
|
Confidential Document
|
Sensitive Data Exposure |
100 |
|
|
Bonus Payload
|
XSS |
100 |
|
|
DOM XSS
|
XSS |
100 |
|
|
Outdated Allowlist
|
Unvalidated Redirects |
100 |
|
|
Zero Stars
|
Improper Input Validation |
100 |
|
|
Exposed Metrics
|
Sensitive Data Exposure |
100 |
|
|
Missing Encoding
|
Improper Input Validation |
100 |
|
|
Admin Section
|
Broken Access Control |
250 |
|
|
Security Policy
|
Miscellaneous |
250 |
|
|
Score Board
|
Miscellaneous |
100 |
|
|
Bully Chatbot
|
Miscellaneous |
100 |
|
|
Privacy Policy
|
Miscellaneous |
100 |
|
|
Login Admin
|
Injection |
250 |
|