Return a list of hands-on SecDim Play secure coding challenges (labs) related to a detected or suspected vulnerability.
SecDim Play challenges are scored, hands-on labs: find and fix a real vulnerability
in running code to earn points and badges.
Use this tool to:
- Find hands-on SecDim Play labs for specific vulnerabilities like XSS, SQL Injection, etc.
- Explore OWASP Top 10 vulnerabilities and related labs
- Provide additional resources and guides to help developers improve their secure coding skills
For structured tutorial content (text, video, and lab-based courses) on the same
vulnerability, use search_learn_courses (SecDim Learn) instead or in addition.
Args:
search: Search term for the vulnerability (e.g., 'xss', 'sql-injection', 'injection')
cwe: Common Weakness Enumeration (CWE) ID to filter by
owasp: OWASP category to filter by (e.g., 'a03:2021')
technology: Technology or framework to filter by (e.g., 'react', 'django')
language: Programming language to filter by (e.g., 'javascript', 'python')
difficulty: Difficulty level to filter by (e.g., 'trivial', 'easy', 'medium', 'hard')
type: Challenge format to filter by (e.g., 'battle', 'exploitation', 'incident-response')
mitre: MITRE ATT&CK ID to filter by (e.g., 'T1102.003')
SecDim Play challenges (labs) each simulate a real vulnerability. They are scored according to
the following difficulty levels:
- Trivial: Easy to find and path vulnerabilities. It can be completed in 5-10 minutes. 1-15 points.
- Easy: Known vulnerabilities. It can be completed in 10-30 minutes. 16-35 points.
- Medium: Known vulnerabilities but require defence-in-depth patch. It can be completed in 20-30 minutes. 36-70 points.
- Hard: Hard to find or patch vulnerabilities. It can be completed in 30-60 minutes. 71-100 points.
- Battle: SecDim Flagship attack and defence challenge that require both vulnerability exploitation and mitigation skills. Points are accumulated.
Returns:
Dictionary containing SecDim Play labs results or error
If there are no results, user can perform a manual search on the SecDim Play frontend (SECDIM_PLAY_FRONTEND_BASE_URL)