The list below presents the 10 most relevant findings that need your attention. To view information on the remaining findings, navigate to the Mend Application.
[KeyStorageServerSideVC.swift:6](https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/iGoat-Swift/iGoat-Swift/Source/Exercises/Key Management/Key Storage Server Side/KeyStorageServerSideVC.swift#L6)
1
2024-04-25 05:55pm
Vulnerable Code
https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/iGoat-Swift/iGoat-Swift/Source/Exercises/Key Management/Key Storage Server Side/KeyStorageServerSideVC.swift#L1-L6
1 Data Flow/s detected
https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/iGoat-Swift/iGoat-Swift/Source/Exercises/Key Management/Key Storage Server Side/KeyStorageServerSideVC.swift#L6
Secure Code Warrior Training Material
● Training
▪ [Secure Code Warrior Insufficient Transport Layer Protection Training](https://portal.securecodewarrior.com/?utm_source=partner-integration:mend&partner_id=mend#/contextual-microlearning/web/itlp/sensitiveinfo/swift/vanilla)
● Videos
▪ [Secure Code Warrior Insufficient Transport Layer Protection Video](https://media.securecodewarrior.com/v2/module_200_unprotected_transport_of_sensitive_information.mp4)
Code Security Report
Scan Metadata
Latest Scan: 2024-04-25 05:54pm Total Findings: 130 | New Findings: 0 | Resolved Findings: 0 Tested Project Files: 113 Detected Programming Languages: 5 (Ruby, C/C++ (Beta), Swift, iOS Objective-C, PHP)
Most Relevant Findings
Vulnerable Code
https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/iGoat-Swift/iGoat-Swift/Source/Exercises/InsecureLocalDataStorage/PlistStorage/PlistStorageExerciseViewController.swift#L16-L211 Data Flow/s detected
https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/iGoat-Swift/iGoat-Swift/Source/Exercises/InsecureLocalDataStorage/PlistStorage/PlistStorageExerciseViewController.swift#L21
Secure Code Warrior Training Material
● Training ▪ [Secure Code Warrior File Manipulation Training](https://portal.securecodewarrior.com/?utm_source=partner-integration:mend&partner_id=mend#/contextual-microlearning/web/injection/pathtraversal/swift/vanilla) ● Videos ▪ [Secure Code Warrior File Manipulation Video](https://media.securecodewarrior.com/v2/module_196_path_traversal.mp4) ● Further Reading ▪ [OWASP Path Traversal](https://owasp.org/www-community/attacks/Path_Traversal) ▪ [OWASP Input Validation Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html)
Vulnerable Code
https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/server/iGoat-Server-challenges/myapp/checkout.php#L31-L361 Data Flow/s detected
https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/server/iGoat-Server-challenges/myapp/checkout.php#L8 https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/server/iGoat-Server-challenges/myapp/checkout.php#L13 https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/server/iGoat-Server-challenges/myapp/checkout.php#L14 https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/server/iGoat-Server-challenges/myapp/checkout.php#L36
Secure Code Warrior Training Material
● Training ▪ [Secure Code Warrior Cross-Site Scripting Training](https://portal.securecodewarrior.com/?utm_source=partner-integration:mend&partner_id=mend#/contextual-microlearning/web/xss/reflected/php/vanilla) ● Videos ▪ [Secure Code Warrior Cross-Site Scripting Video](https://media.securecodewarrior.com/v2/module_73_reflected_cross_site_scripting.mp4)
Vulnerable Code
https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/iGoat-Swift/iGoat-Swift/Source/Exercises/Broken Cryptography/Crypto Challenge/CryptoChallengeVC.swift#L18-L231 Data Flow/s detected
https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/iGoat-Swift/iGoat-Swift/Source/Exercises/Broken Cryptography/Crypto Challenge/CryptoChallengeVC.swift#L23
Secure Code Warrior Training Material
● Training ▪ [Secure Code Warrior Insufficient Transport Layer Protection Training](https://portal.securecodewarrior.com/?utm_source=partner-integration:mend&partner_id=mend#/contextual-microlearning/web/itlp/sensitiveinfo/swift/vanilla) ● Videos ▪ [Secure Code Warrior Insufficient Transport Layer Protection Video](https://media.securecodewarrior.com/v2/module_200_unprotected_transport_of_sensitive_information.mp4)
Vulnerable Code
https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/iGoat-Swift/iGoat-Swift/Source/Exercises/InsecureLocalDataStorage/BinaryCookies/BinaryCookiesExerciseVC.swift#L6-L111 Data Flow/s detected
https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/iGoat-Swift/iGoat-Swift/Source/Exercises/InsecureLocalDataStorage/BinaryCookies/BinaryCookiesExerciseVC.swift#L11
Secure Code Warrior Training Material
● Training ▪ [Secure Code Warrior Insufficient Transport Layer Protection Training](https://portal.securecodewarrior.com/?utm_source=partner-integration:mend&partner_id=mend#/contextual-microlearning/web/itlp/sensitiveinfo/swift/vanilla) ● Videos ▪ [Secure Code Warrior Insufficient Transport Layer Protection Video](https://media.securecodewarrior.com/v2/module_200_unprotected_transport_of_sensitive_information.mp4)
Vulnerable Code
https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/iGoat-Swift/iGoat-Swift/Source/Exercises/InsecureLocalDataStorage/WebKit Cache/WebkitCacheExerciseVC.swift#L22-L271 Data Flow/s detected
https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/iGoat-Swift/iGoat-Swift/Source/Exercises/InsecureLocalDataStorage/WebKit Cache/WebkitCacheExerciseVC.swift#L27
Secure Code Warrior Training Material
● Training ▪ [Secure Code Warrior Insufficient Transport Layer Protection Training](https://portal.securecodewarrior.com/?utm_source=partner-integration:mend&partner_id=mend#/contextual-microlearning/web/itlp/sensitiveinfo/swift/vanilla) ● Videos ▪ [Secure Code Warrior Insufficient Transport Layer Protection Video](https://media.securecodewarrior.com/v2/module_200_unprotected_transport_of_sensitive_information.mp4)
Vulnerable Code
https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/iGoat-Swift/iGoat-Swift/Source/Exercises/Authentication/Remote/RemoteAuthenticationExerciseVC.swift#L1-L61 Data Flow/s detected
https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/iGoat-Swift/iGoat-Swift/Source/Exercises/Authentication/Remote/RemoteAuthenticationExerciseVC.swift#L6
Secure Code Warrior Training Material
● Training ▪ [Secure Code Warrior Insufficient Transport Layer Protection Training](https://portal.securecodewarrior.com/?utm_source=partner-integration:mend&partner_id=mend#/contextual-microlearning/web/itlp/sensitiveinfo/swift/vanilla) ● Videos ▪ [Secure Code Warrior Insufficient Transport Layer Protection Video](https://media.securecodewarrior.com/v2/module_200_unprotected_transport_of_sensitive_information.mp4)
Vulnerable Code
https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/iGoat-Swift/iGoat-Swift/Source/Exercises/SideChannelDataLeaks/CloudMisconfiguration/CloudMisconfigurationExerciseVC.swift#L14-L191 Data Flow/s detected
https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/iGoat-Swift/iGoat-Swift/Source/Exercises/SideChannelDataLeaks/CloudMisconfiguration/CloudMisconfigurationExerciseVC.swift#L19
Secure Code Warrior Training Material
● Training ▪ [Secure Code Warrior Insufficient Transport Layer Protection Training](https://portal.securecodewarrior.com/?utm_source=partner-integration:mend&partner_id=mend#/contextual-microlearning/web/itlp/sensitiveinfo/swift/vanilla) ● Videos ▪ [Secure Code Warrior Insufficient Transport Layer Protection Video](https://media.securecodewarrior.com/v2/module_200_unprotected_transport_of_sensitive_information.mp4)
Vulnerable Code
https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/iGoat-Swift/iGoat-Swift/Source/Exercises/Key Management/Key Storage Server Side/KeyStorageServerSideVC.swift#L1-L61 Data Flow/s detected
https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/iGoat-Swift/iGoat-Swift/Source/Exercises/Key Management/Key Storage Server Side/KeyStorageServerSideVC.swift#L6
Secure Code Warrior Training Material
● Training ▪ [Secure Code Warrior Insufficient Transport Layer Protection Training](https://portal.securecodewarrior.com/?utm_source=partner-integration:mend&partner_id=mend#/contextual-microlearning/web/itlp/sensitiveinfo/swift/vanilla) ● Videos ▪ [Secure Code Warrior Insufficient Transport Layer Protection Video](https://media.securecodewarrior.com/v2/module_200_unprotected_transport_of_sensitive_information.mp4)
Vulnerable Code
https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/iGoat-Swift/iGoat-Swift/Source/Model/Exercise.swift#L32-L371 Data Flow/s detected
https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/iGoat-Swift/iGoat-Swift/Source/Model/Exercise.swift#L37
Secure Code Warrior Training Material
● Training ▪ [Secure Code Warrior Insufficient Transport Layer Protection Training](https://portal.securecodewarrior.com/?utm_source=partner-integration:mend&partner_id=mend#/contextual-microlearning/web/itlp/sensitiveinfo/swift/vanilla) ● Videos ▪ [Secure Code Warrior Insufficient Transport Layer Protection Video](https://media.securecodewarrior.com/v2/module_200_unprotected_transport_of_sensitive_information.mp4)
Vulnerable Code
https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/iGoat-Swift/iGoat-Swift/Source/Exercises/Server Communication/ServerCommunicationExerciseVC.swift#L12-L171 Data Flow/s detected
https://github.com/lukebrogan-mend/iGoat-Swift/blob/cc10fcf067224b79387392e54f8b97e6ed998bcb/iGoat-Swift/iGoat-Swift/Source/Exercises/Server Communication/ServerCommunicationExerciseVC.swift#L17
Secure Code Warrior Training Material
● Training ▪ [Secure Code Warrior Insufficient Transport Layer Protection Training](https://portal.securecodewarrior.com/?utm_source=partner-integration:mend&partner_id=mend#/contextual-microlearning/web/itlp/sensitiveinfo/swift/vanilla) ● Videos ▪ [Secure Code Warrior Insufficient Transport Layer Protection Video](https://media.securecodewarrior.com/v2/module_200_unprotected_transport_of_sensitive_information.mp4)Findings Overview