OWASP Top Ten 2025 - A08 Software or Data Integrity Failures

Part of Introduction To OWASP Top Ten Topic: Web Hacking

Counts towards

Access

Included in StationX Membership — unlimited attempts

🔒 StationX Membership — $299 / year ($24.92/mo billed annually)

Already have access? Sign in.

New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.

What you'll do

In this lab, students will explore the "A08:2025 Software or Data Integrity Failures" vulnerability of the OWASP Top Ten and analyze how failures in software or data integrity can lead to system compromise.

They will explore scenarios involving tampered updates in a continuous integration / continuous delivery pipeline and insecure deserialization in a python application resulting in system compromise.

⏱ About 60 minutes
Counts towards: Certified Ethical Hacker (exam CEH) · CompTIA PenTest+ (exam PT0-003) · CompTIA SecAI+ (exam CY0-001) · OffSec Certified Professional (exam OSCP)

Roadmaps that use this lab

CompTIA PenTest+ (PT0-003) — step 4: Web application testing
Certified Ethical Hacker (CEH) — step 5: Web and application attacks
OffSec Certified Professional (OSCP) — step 4: Web attack chains
CompTIA SecAI+ (CY0-001) — step 3: Securing AI systems
Penetration Tester — career path — step 4: Web application attacks
Penetration Tester — career path — step 7: Certify it
Cloud Security Engineer — career path — step 6: Containers, IaC and the pipeline
AI Security Engineer — career path — step 3: The AI security certification