MITRE ATT&CK

COD 310 – Securing ASP.NET Core Applications (NEW)

20 Minutes

0.4 CPE

COD 325 – Protecting Data in C# for .NET Core (NEW)

30 Minutes

0.6 CPE

CYB 250 – Cyber Threat Hunting: Tactics, Techniques, and Procedures (TTP)

20 Minutes

0.5 CPE

DES 232 – Mitigating OWASP 2021 Injection

12 Minutes

0.25 CPE

DES 270 – Mitigating OWASP Mobile Top 10 Risks (NEW)

30 Minutes

0.6 CPE

LAB 111 – Identifying Server-Side Request Forgery

5 Minutes

0.25 CPE

LAB 124 – Identifying Horizontal Privilege Escalation

5 Minutes

0.25 CPE

LAB 125 – Identifying Buffer Overflow

5 Minutes

0.25 CPE

LAB 126 – Identifying Information Leakage

5 Minutes

0.25 CPE

LAB 131 – Identifying Improper Restriction of XML External Entity Reference

5 Minutes

0.25 CPE

LAB 132 – Identifying Exposed Services

5 Minutes

0.25 CPE

LAB 133 – Identifying Exposure of Sensitive Information Through Environmental Variables

5 Minutes

0.25 CPE

LAB 134 – Identifying Plaintext Storage of a Password

5 Minutes

0.25 CPE

LAB 135 – Identifying URL Redirection to Untrusted Site

5 Minutes

0.25 CPE

LAB 136 – Identifying Improper Neutralization of Script in Attributes in a Web Page

5 Minutes

0.25 CPE

LAB 137 – Identifying Improper Authorization

5 Minutes

0.25 CPE

LAB 139 – Identifying Use of a Key Past its Expiration Date

5 Minutes

0.25 CPE

LAB 211 – Defending Java Applications Against Credentials in Code Medium

10 Minutes

.25 CPE

LAB 212 – Defending Python Applications Against Credentials in Code Medium

10 Minutes

.25 CPE

LAB 213 – Defending Node.js Applications Against Credentials in Code Medium

10 Minutes

.25 CPE

LAB 214 – Defending C# Applications Against Credentials in Code Medium

10 Minutes

.25 CPE

LAB 215 – Defending Java Applications Against Business Logic Error for Input Validation

10 Minutes

.25 CPE

LAB 216 – Defending Python Applications Against Business Logic Error for Input Validation

10 Minutes

.25 CPE

LAB 217 – Defending Node.js Applications Against Business Logic Error for Input Validation

10 Minutes

.25 CPE

LAB 218 – Defending C# Applications Against Business Logic Error for Input Validation

10 Minutes

.25 CPE

LAB 224 – Defending Java Applications Against Forceful Browsing

10 Minutes

.25 CPE

LAB 225 – Defending Python Applications Against Forceful Browsing

10 Minutes

.25 CPE

LAB 226 – Defending Node.js Applications Against Forceful Browsing

10 Minutes

.25 CPE

LAB 227 – Defending C# Applications Against Forceful Browsing

10 Minutes

.25 CPE

LAB 348 – Defending C++ Applications Against Null Pointer Dereference (NEW)

15 Minutes

0.3 CPE

LAB 349 – Defending TypeScript Applications Against SQL Injection (NEW)

15 Minutes

0.3 CPE

LAB 350 – Defending Go Applications Against SQL Injection (NEW)

15 Minutes

0.3 CPE

LAB 351 – Defending TypeScript Applications Against Cross-Site Scripting (NEW)

15 Minutes

0.3 CPE

LAB 352 – Defending Go Applications Against Cross-Site Scripting (NEW)

15 Minutes

0.3 CPE

LAB 353 – Defending TypeScript Applications Against Improper Authentication (NEW)

15 Minutes

0.3 CPE

LAB 354 – Defending Go Applications Against Improper Authentication (NEW)

15 Minutes

0.3 CPE

LAB 355 – Defending C Applications Against Stack-based Buffer Overflow (NEW)

15 Minutes

0.3 CPE

LAB 610 – ATT&CK: File and Directory Permissions Modification

12 Minutes

0.25 CPE

LAB 611 – ATT&CK: File and Directory Discovery

12 Minutes

0.25 CPE

LAB 612 – ATT&CK: Testing for Network Services Identification

12 Minutes

0.25 CPE

LAB 613 – ATT&CK: Testing for Vulnerability Identification Using Vulnerability Databases

12 Minutes

0.25 CPE

LAB 615 – ATT&CK: Updating Vulnerable Java Web Application Server Software

12 Minutes

0.25 CPE

LAB 616 – ATT&CK: Host Vulnerability Scanning

15 Minutes

.25 CPE

LAB 617 – ATT&CK: Testing for Plaintext Secrets in Files

12 Minutes

.25 CPE

LAB 618 – ATT&CK: Log Analysis

12 Minutes

.25 CPE

LAB 619 – ATT&CK: Exfiltration Over C2 Channel

30 Minutes

.6 CPE

LAB 620 – ATT&CK: Advanced Exploit of Remote Services

30 Minutes

.25 CPE

LAB 621 – ATT&CK: Password Cracking

5 Minutes

0.25 CPE

LAB 622 – ATT&CK: Exploiting Windows File Sharing Server with External Remote Services

20 Minutes

0.5 CPE

LAB 623 – ATT&CK: Exploiting Vulnerable Java Web Application Server Software

12 Minutes

0.25 CPE

LAB 624 – ATT&CK: Exploiting Java Web Application Server Misconfiguration

12 Minutes

0.25 CPE

LAB 625 – ATT&CK: Advanced Exploit of Public-Facing Application

30 Minutes

.25 CPE

LAB 627 – Using an Exploit Framework for Port Scanning

15 Minutes

0.3 CPE

LAB 628 – Using an Exploit Framework for SMB Version Scanning

15 Minutes

0.3 CPE

LAB 629 – Using an Exploit Framework for SNMP Scanning

15 Minutes

0.3 CPE

LAB 630 – ATT&CK: Exploiting Java SQL Injection to Extract Password Hashes

15 Minutes

0.25 CPE

LAB 631 – ATT&CK: Network Service Discovery

12 Minutes

0.25 CPE

LAB 632 – ATT&CK: Network Share Discovery

12 Minutes

0.25 CPE

LAB 633 – Using an Exploit Framework for Web Application Scanning (NEW)

30 Minutes

0.6 CPE

LAB 634 – ATT&CK: Create Account

12 Minutes

0.25 CPE

LAB 635 – ATT&CK: Unsecured Credentials

12 Minutes

0.25 CPE

LAB 636 – ATT&CK: Data from Local System

12 Minutes

0.25 CPE

LAB 637 – ATT&CK: Valid Accounts

12 Minutes

0.25 CPE

LAB 638 – Using Mimikatz (NEW)

15 Minutes

0.3 CPE

LAB 639 – Using an Exploit Framework via Command Line Interface (NEW)

15 Minutes

0.3 CPE