Browse › Introduction To OWASP Top Ten

OWASP Top Ten 2025 - A03 Software Supply Chain Failures
Part of Introduction To OWASP Top Ten Topic: Web Hacking
Access
Included in StationX Membership — unlimited attempts
🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
Already have access? Sign in.
New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.
What you'll do
In this lab, students will learn about the "A03:2025 Software Supply Chain Failures" vulnerability of the OWASP Top Ten and explore risks introduced through the software supply chain, including compromised dependencies and insecure build processes.
- They will identify vulnerable components and simulate how attackers can exploit weaknesses in third-party libraries or deployment pipelines, reinforcing the importance of supply chain security.
- They will also look at tools to help identify outdated libraries to minimize the vulnerabilities.
- ⏱ About 60 minutes
- Counts towards: Certified Ethical Hacker (exam CEH) · CompTIA PenTest+ (exam PT0-003) · CompTIA SecAI+ (exam CY0-001) · OffSec Certified Professional (exam OSCP)
Roadmaps that use this lab
- CompTIA PenTest+ (PT0-003) — step 4: Web application testing
- Certified Ethical Hacker (CEH) — step 5: Web and application attacks
- OffSec Certified Professional (OSCP) — step 4: Web attack chains
- CompTIA SecAI+ (CY0-001) — step 3: Securing AI systems
- Penetration Tester — career path — step 4: Web application attacks
- Penetration Tester — career path — step 7: Certify it
- Cloud Security Engineer — career path — step 6: Containers, IaC and the pipeline
- AI Security Engineer — career path — step 3: The AI security certification










