https://github.com/infinit3i/cwes
https://github.com/infinit3i/cwes
cwe mitre
Last synced: 14 days ago
JSON representation
- Host: GitHub
- URL: https://github.com/infinit3i/cwes
- Owner: Infinit3i
- Created: 2026-04-20T01:12:58.000Z (about 2 months ago)
- Default Branch: main
- Last Pushed: 2026-05-18T12:23:05.000Z (29 days ago)
- Last Synced: 2026-05-18T14:30:19.135Z (29 days ago)
- Topics: cwe, mitre
- Language: TypeScript
- Homepage: https://infinit3i.github.io/CWEs/
- Size: 621 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# CWE Learning Platform
Interactive learning platform for Common Weakness Enumerations (CWEs) - the most dangerous software security vulnerabilities.
## What is this?
A hands-on educational tool where you drag and drop secure code fixes onto vulnerable functions. Learn to identify and fix real security vulnerabilities through interactive exercises based on authentic examples from MITRE's official CWE database.
## How it works
1. **See vulnerable code** - Real-world security flaws in context
2. **Drag the fix** - Choose the correct secure replacement from multiple options
3. **Learn why** - Get detailed explanations of what makes code secure vs vulnerable
4. **Explore real attacks** - See actual CVEs and attack vectors from MITRE
## Current Coverage
**SQL Injection (CWE-89)**: 6 exercises covering authentication, data queries, updates, and complex searches
**Cross-Site Scripting (CWE-79)**: User input handling and output encoding
**More coming**: Working toward complete coverage of OWASP Top 25 vulnerabilities
## Features
✅ **Random exercises** - No linear progression, reinforces learning through repetition
✅ **Real MITRE data** - Official CVEs, severity ratings, and attack patterns
✅ **Authentic examples** - Vulnerable code patterns from actual security incidents
✅ **Technical depth** - Learn *why* fixes work at a technical level
## Quick Start
```bash
npm install
npm run dev
# Open http://localhost:5173
```
Deploy to GitHub Pages: Push to main branch with Actions enabled.
---
*Built for security professionals, developers, and students learning application security.*