EC-Council labs
Every hands-on lab mapped to a EC-Council certification.
Vendor: EC-Council clear · browse all certifications
2 labs
Expert
Root-Cause & Secure-Code Remediation: CVE-2026-2329
Fix CVE-2026-2329 at the source. Read the vulnerable Grandstream CGI handler, trace the unauthenticated request parameter to the unbounded copy (CWE-121), reject a strncpy attempt that still overflows, deploy the bounds-checked fix, add a management-VLAN compensating control, and verify with audit and vulnscan.
Expert
Root-Cause & Secure-Code Remediation: CVE-2026-29058
Fix CVE-2026-29058 at the source. Read the vulnerable AVideo encoder code, trace untrusted input from the request parameter to the OS-command sink, reject a tempting but insufficient blacklist/escapeshellcmd fix, then deploy and prove the correct remediation: allow-list validation plus shell-free execution. Audit and re-scan to verify, and write the pull request.