The solution to Challenge #1: Schooled is live.
Quick recap: the Secure Code Review Challenge is a free biweekly series of full, realistic applications with vulnerabilities based on real-world CVEs — you review, identify, and exploit them the way you would in a real security review, not just spot-the-bug pattern recognition.
If you haven’t tried Challenge #1 yet, this is a good time to pause and attempt it before watching — no spoilers below. In the solution video, I walk through the full review process — architecture, entry points, threat modeling, mitigation review, then finding, exploiting, and fixing the planted vulnerability.
Challenge #2 is also live now if you’re ready for the next one.
Watch the solution: https://youtu.be/Oc-IlLdRusE
Read the full write-up: the-secure-code-review-challenge/solutions/001-schooled/SOLUTION.md at main · mohamed-osama-aboelkheir/the-secure-code-review-challenge · GitHub
Repo: GitHub - mohamed-osama-aboelkheir/the-secure-code-review-challenge: A biweekly secure code review challenge series, full working apps, based on real-world vulnerabilities. · GitHub
Try Challenge #1: the-secure-code-review-challenge/challenges/001-schooled at main · mohamed-osama-aboelkheir/the-secure-code-review-challenge · GitHub
Try Challenge #2: the-secure-code-review-challenge/challenges/002-professional at main · mohamed-osama-aboelkheir/the-secure-code-review-challenge · GitHub