5 Active Challenges

Security Challenges

Each challenge contains real AI-generated code with a hidden security vulnerability. Find the flaw, explain why it's dangerous, and write the fix.

mediumgrok-4
Invisible Login
"A dashboard UI hides admin routes correctly, yet attackers can still access them. Explain how this is possible and implement a fix without changing the UI components."
Next.js
1 attempts
critical risk
mediumgrok-3
The Trusting Cookie
"Audit a Next.js app that uses cookies for authentication and identify all client-side trust issues. Propose a secure server-side alternative."
Next.js
1 attempts
high risk
mediumgrok-3
React Router
"Build a dashboard with an admin panel. Only admin users should see the admin section. Use Next.js App Router with React."
Next.js
1 attempts
critical risk
mediumgrok-3-mini
REST API challenge
"Build a REST API for a blog platform with CRUD operations for posts. Users should only be able to edit their own posts. Use Express.js and PostgreSQL."
Express.js
0 attempts
critical risk
mediumgrok-3-mini
User Auth System
"Build a complete user registration and login system with password hashing and JWT tokens. Use Express.js and PostgreSQL."
Express.js
0 attempts
high risk