STRIDE Threat-Model Drill
devsecops · easy · +30 XP
Target
GET /api/lab/threat-model-101/threats (6 numbered threat descriptions)
POST /api/lab/threat-model-101/submit body {answers: {1: 'S', 2: 'T', ...}}
Goal: each threat maps to one STRIDE letter (Spoofing/Tampering/Repudiation/Information-disclosure/Denial-of-service/Elevation-of-privilege). Submit answers as {n: letter}. All 6 must be correct.
// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/threat-model-101/
// reuse on the cli
// submit flag
// no solves yet
3 of 12 · devsecops