Security Journey and HackerOne - Secure Coding Tournament

Injection | SQL Injection

Command Injection (CWE-78 – OS Command Injection)
Cross-Site Scripting (Reflected XSS) | Improper Web Page Input Neutralization
XML External Entities (XXE) | Improper Restriction of XML External Entity
Broken Access Control | Improper Access Control
Server-Side Request Forgery | Regex Filtering
Security Logging and Monitoring Failures | Insufficient Logging
Cryptographic Failures | Use of Hard-coded Password (Part 1)
Cryptographic Failures | Use of Hard-coded Password (Part 2)
CTF AI Module | Prompt Leak: I
CTF AI Module | Prompt Leak: II
CTF AI Module | RAG Hijack