CAP-PC ENS case studies
CAP-PC ENS · Put your knowledge to work in context.
The Certified AppSec Practitioner (CAP) Practical Challenge is a hands-on certification exam offered through the SecOps Group's pentesting exams programme. The SecOps Group describes itself as a globally recognized IT security company with two business units, consultancy and education, and states that "through our exams, we provide an authentic and credible certification program that is up-to-date and represents real life business risks." Its exam offerings are described as "Perfect for assessing and recruiting pentesters", "Based on real-world scenarios", and "Online, on-demand and affordable". The CAP-PC ENS case studies are 5 cases and about 3,002 words.
1Cross-Tenant Invoice Cache Disclosure
Northwind Health runs a multi-tenant patient portal on Next.js and an API gateway. Tenants are selected by an X-Tenant-ID header set by the gateway after validating a session cookie; the API does not otherwise scope database queries because a shared library appends tenant id.
606 words, about 3 min2SSRF Alert in Link Preview Service
Acme Docs has a Python Django service that renders link previews. A CodeQL alert flags requests.get(user url, timeout=3, allow redirects=True) in preview/views.py .
572 words, about 3 min3Partner Role Assumed After ExternalId Exposure
Helio Manufacturing runs 120 AWS accounts under Organizations. An assessment finds 18 IAM roles named PartnerAccess- in the production account.
586 words, about 3 min4RAG Assistant Returns Restricted HR Case Notes
Lumen HR deploys an internal assistant built on Azure OpenAI and a vector database containing 38,000 HR documents: policies, compensation bands, investigation notes, and employee relations case files. Retrieval filters by department id taken from the user's Entra ID token.
618 words, about 3 min5Jira Triage Agent Exfiltrates Confluence Excerpt
Vantage Support runs an internal AI agent that triages Jira tickets. The agent has a Jira service account that can read all projects and comment on tickets, a Confluence read token, and an outbound HTTP tool for link enrichment that fetches URLs in ticket descriptions.
620 words, about 3 min