Skip to content
sec/atlas
OWASP Top 10, hands onA01 Broken access controlA02 Security misconfigurationA03 Software supply chain failuresA04 Cryptographic failuresA05 InjectionA06 Insecure designA07 Authentication failuresA08 Software or data integrity failuresA09 Security logging and alerting failuresA10 Mishandling of exceptional conditions
all maps

One challenge for each category of the OWASP Top 10 (2025). Each station shows a few lines of real-looking code: find the ones that cause the problem.

Drag to move, scroll or pinch to zoom, click a node to open it.

0 of 10 places explored

Missions

Pick a guided trail. The map points at your next stop.

  • The whole Top 10

    Take the ten stations in order and solve one challenge for each category.

    0/10

  • Break the login

    Four stations that all come together around a login: the password, the token, the log and the error path.

    0/4

OWASP Top 10, hands on