security innovation logo stacked in color
  • Training
    • AppSec Training
    • Labs
    • Cyber Ranges
    • Skills Assessment
    • Courses
    • Try It Now
  • Solutions
    • Application Security Development
    • Developer Security Training
    • Mobile Application Security
  • Plans
  • Resources
  • Company
    • About Us
    • Partners
    • Newsroom
    • Contact Us
    • Careers
  • Blog
  • Request Demo

 Home/ Course Catalog/ Subject Matter/Skill Lab

Skill Lab

Courses

View All Courses
LAB 356 – Defending Python APIs from Broken Object Level Authorization (NEW)
15 Minutes
0.3 CPE
LAB 357 – Defending Python APIs from Broken Authentication (NEW)
15 Minutes
0.3 CPE
LAB 358 – Defending Python APIs from Broken Object Property Level Authorization (NEW)
15 Minutes
0.3 CPE
LAB 359 – Defending Python APIs from Unrestricted Resource Consumption (NEW)
15 Minutes
0.3 CPE
LAB 360 – Defending Python APIs from Broken Function Level Authorization (NEW)
15 Minutes
0.3 CPE
LAB 361 – Defending Python APIs from Unrestricted Access to Sensitive Business Flows (NEW)
15 Minutes
0.3 CPE
LAB 362 – Defending Python APIs from Server Side Request Forgery (NEW)
15 Minutes
0.3 CPE
LAB 363 – Defending Python APIs from Security Misconfiguration (NEW)
15 Minutes
0.3 CPE
LAB 364 – Defending Python APIs from Improper Inventory Management (NEW)
15 Minutes
0.3 CPE
LAB 365 – Defending Python APIs from Unsafe Consumption of APIs (NEW)
15 Minutes
0.3 CPE
LAB 640 – ATT&CK: Search Victim-Owned Websites (NEW)
10 Minutes
0.2 CPE
LAB 641 – ATT&CK: Password Policy Discovery (NEW)
10 Minutes
0.2 CPE
LAB 642 – ATT&CK: Permission Groups Discovery (NEW)
10 Minutes
0.2 CPE
LAB 351 – Defending TypeScript Applications Against Cross-Site Scripting
15 Minutes
0.3 CPE
LAB 348 – Defending C++ Applications Against Null Pointer Dereference
15 Minutes
0.3 CPE
LAB 355 – Defending C Applications Against Stack-based Buffer Overflow
15 Minutes
0.3 CPE
LAB 638 – Using Mimikatz
15 Minutes
0.3 CPE
LAB 639 – Using an Exploit Framework via Command Line Interface
15 Minutes
0.3 CPE
LAB 353 – Defending TypeScript Applications Against Improper Authentication
15 Minutes
0.3 CPE
LAB 354 – Defending Go Applications Against Improper Authentication
15 Minutes
0.3 CPE
LAB 350 – Defending Go Applications Against SQL Injection
15 Minutes
0.3 CPE
LAB 352 – Defending Go Applications Against Cross-Site Scripting
15 Minutes
0.3 CPE
LAB 349 – Defending TypeScript Applications Against SQL Injection
15 Minutes
0.3 CPE
LAB 633 – Using an Exploit Framework for Web Application Scanning
30 Minutes
0.6 CPE
DES 250 – Secure Software Acceptance and Deployment
25 Minutes
0.5 CPE
LAB 340 – Defending C Applications Against Use After Free
15 Minutes
0.3 CPE
LAB 341 – Defending C++ Applications Against Use After Free
15 Minutes
0.3 CPE
LAB 347 – Defending C Applications Against Null Pointer Dereference
15 Minutes
0.3 CPE
LAB 329 – Defending Go Applications Against SSRF
15 Minutes
0.3 CPE
LAB 333 – Defending Go Applications Against Hard-coded Credentials
15 Minutes
0.3 CPE
LAB 338 – Defending Go Applications Against CSRF
15 Minutes
0.3 CPE
LAB 339 – Defending Go Applications Against Path Traversal
15 Minutes
0.3 CPE
LAB 342 – Defending TypeScript Applications Against Command Injection
15 Minutes
0.3 CPE
LAB 343 – Defending Go Applications Against Command Injection
15 Minutes
0.3 CPE
LAB 344 – Defending TypeScript Applications Against Incorrect Authorization
15 Minutes
0.3 CPE
LAB 345 – Defending Go Applications Against Incorrect Authorization
15 Minutes
0.3 CPE
LAB 346 – Defending TypeScript Applications Against Deserialization of Untrusted
15 Minutes
0.3 CPE
LAB 626 – Using an Exploit Framework for SQL Injection
30 Minutes
0.6 CPE
LAB 628 – Using an Exploit Framework for SMB Version Scanning
15 Minutes
0.3 CPE
LAB 629 – Using an Exploit Framework for SNMP Scanning
15 Minutes
0.3 CPE
LAB 327 – Defending C Applications Against Path Traversal
5 Minutes
.25 CPE
LAB 328 – Defending C++ Applications Against Path Traversal
5 Minutes
.25 CPE
LAB 616 – ATT&CK: Host Vulnerability Scanning
15 Minutes
.25 CPE
LAB 620 – ATT&CK: Advanced Exploit of Remote Services
30 Minutes
.25 CPE
LAB 625 – ATT&CK: Advanced Exploit of Public-Facing Application
30 Minutes
.25 CPE
COD 268 – Mitigating TypeScript Application Vulnerabilities
30 Minutes
.5 CPE
LAB 206 – Defending Python Applications Against XPath Injection
5 Minutes
.1 CPE
LAB 207 – Defending Node.js Applications Against XPath Injection
5 Minutes
.1 CPE
LAB 208 – Defending C# Applications Against XPath Injection
5 Minutes
.1 CPE
LAB 619 – ATT&CK: Exfiltration Over C2 Channel
30 Minutes
.6 CPE
LAB 301 – Defending Java Applications Against Open Redirect
5 Minutes
.25 CPE
LAB 302 – Defending Python Applications Against Open Redirect
5 Minutes
.25 CPE
LAB 303 – Defending C# Applications Against Open Redirect
5 Minutes
.25 CPE
LAB 304 – Defending Node.js Applications Against Open Redirect
5 Minutes
.25 CPE
LAB 305 – Defending Java Applications Against Weak Password Reset
5 Minutes
.25 CPE
LAB 306 – Defending Python Applications Against Weak Password Reset
5 Minutes
.25 CPE
LAB 307 – Defending C# Applications Against Weak Password Reset
5 Minutes
0.25 CPE
LAB 308 – Defending Node.js Applications Against Weak Password Reset
5 Minutes
.25 CPE
LAB 309 – Defending TypeScript Applications Against Unrestricted Upload of File with Dangerous Type
5 Minutes
.25 CPE
LAB 314 – Defending TypeScript Applications Against SSRF
5 Minutes
.25 CPE
LAB 316 – Defending TypeScript Applications Against Hard-coded Credentials
5 Minutes
.25 CPE
LAB 320 – Defending TypeScript Applications Against Code Injection
5 Minutes
.25 CPE
LAB 325 – Defending TypeScript Applications Against CSRF
5 Minutes
.25 CPE
LAB 326 – Defending TypeScript Applications Against Path Traversal
5 Minutes
.25 CPE
LAB 287 – Defending Java Applications Against Null Pointer Dereference
10 Minutes
.25 CPE
LAB 288 – Defending C# Applications Against Null Pointer Dereference
10 Minutes
.25 CPE
LAB 289 – Defending Java Applications Against Path Traversal
10 Minutes
.25 CPE
LAB 290 – Defending Python Applications Against Path Traversal
10 Minutes
.25 CPE
LAB 291 – Defending Node.js Applications Against Path Traversal
10 Minutes
.25 CPE
LAB 292 – Defending C# Applications Against Path Traversal
10 Minutes
.25 CPE
LAB 293 – Defending Java Applications Against Integer Overflow
10 Minutes
.25 CPE
LAB 294 – Defending C# Applications Against Integer Overflow
10 Minutes
.25 CPE
LAB 617 – ATT&CK: Testing for Plaintext Secrets in Files
12 Minutes
.25 CPE
LAB 618 – ATT&CK: Log Analysis
12 Minutes
.25 CPE
LAB 201 – Defending Java Applications Against Canonicalization
5 Minutes
.1 CPE
LAB 202 – Defending Python Applications Against Canonicalization
5 Minutes
.1 CPE
LAB 203 – Defending C# Applications Against Canonicalization
5 Minutes
.1 CPE
LAB 204 – Defending Node.js Applications Against Canonicalization
5 Minutes
.1 CPE
LAB 275 – Defending Java Applications Against Command Injection
10 Minutes
0.25 CPE
LAB 276 – Defending Python Applications Against Command Injection
10 Minutes
0.25 CPE
LAB 277 – Defending Node.js Applications Against Command Injection
10 Minutes
0.25 CPE
LAB 278 – Defending C# Applications Against Command Injection
10 Minutes
0.25 CPE
LAB 279 – Defending Java Applications Against Dangerous File Upload
10 Minutes
0.25 CPE
LAB 280 – Defending Python Applications Against Dangerous File Upload
10 Minutes
0.25 CPE
LAB 281 – Defending Node.js Applications Against Dangerous File Upload
10 Minutes
0.25 CPE
LAB 282 – Defending C# Applications Against Dangerous File Upload
10 Minutes
0.25 CPE
LAB 283 – Defending Java Applications Against RegEx DoS
10 Minutes
0.25 CPE
LAB 284 – Defending Python Applications Against RegEx DoS
10 Minutes
0.25 CPE
LAB 285 – Defending Node.js Applications Against RegEx DoS
10 Minutes
0.25 CPE
LAB 286 – Defending C# Applications Against RegEx DoS
10 Minutes
0.25 CPE
LAB 612 – ATT&CK: Testing for Network Services Identification
12 Minutes
0.25 CPE
LAB 613 – ATT&CK: Testing for Vulnerability Identification Using Vulnerability Databases
12 Minutes
0.25 CPE
LAB 212 – Defending Python Applications Against Credentials in Code Medium
10 Minutes
.25 CPE
LAB 213 – Defending Node.js Applications Against Credentials in Code Medium
10 Minutes
.25 CPE
LAB 214 – Defending C# Applications Against Credentials in Code Medium
10 Minutes
.25 CPE
LAB 215 – Defending Java Applications Against Business Logic Error for Input Validation
10 Minutes
.25 CPE
LAB 216 – Defending Python Applications Against Business Logic Error for Input Validation
10 Minutes
.25 CPE
LAB 217 – Defending Node.js Applications Against Business Logic Error for Input Validation
10 Minutes
.25 CPE
LAB 218 – Defending C# Applications Against Business Logic Error for Input Validation
10 Minutes
.25 CPE
LAB 224 – Defending Java Applications Against Forceful Browsing
10 Minutes
.25 CPE
security innovation white logo
Trusted since 2002, CMD+CTRL delivers mid-size to enterprise-ready software security training through interactive modules, real-world labs, and hands-on cyber ranges.

Training & Product

AppSec Training

Cyber Range

Skills Assessment

Courses

Labs

Solutions

Application Security Development

Developer Security Training

Mobile Application Security

About Us

HQ – Boston, MA

187 Ballardvale Street, Suite A195
Wilmington, MA 01887

Sales: (339) 707-7929

Email: Sales Team

Email: Support Team

Careers

Contact Us

Security Requirements

Privacy Policy|

Cookie Policy

Copyright © 2025 CMD+CTRL Security. All Rights Reserved.
  • Follow
  • Follow
  • Follow