OWASP WebGoat

@OWASP_WebGoat

Official account of the original #OWASP WebGoat ... a purposely vulnerable J2EE app & training platform to help improve #AppSec

OWASP WebGoat
@OWASP_WebGoat
Dec 22, 2021
Nice to see ActiveScan++ detecting this vulnerability. We have a lesson that demonstrates precisely this attack. Try out our XXE lessons...
Nate
@nnwakelam
Nov 1, 2021
Would you expect burp suite to flag this as XXE when all that was required was changing the Content-Type to application/xml and supplying an XXE in the POST POST /endpoint Content-Type: application/json {"lol":"lol"}
2
OWASP WebGoat
@OWASP_WebGoat
Oct 10, 2018
Have been slow to check or send out updates. Finally logging in, happy to see this sort of notification.
Age-restricted adult content. This content might not be appropriate for people under 18 years old. To view this media, you’ll need to log in to X. Learn more
OWASP WebGoat
@OWASP_WebGoat
Jun 21, 2018
Today we will host a security workshop with WebGoat at #DevoxxPL for all the participants please follow the instructions on github.com/nbaars/devoxx-… in order to get everything up and running
GitHub - nbaars/devoxx-pl
From github.com
OWASP WebGoat
@OWASP_WebGoat
May 31, 2018
Giving a WebGoat workshop at DevOpsCon (@devops_con) with special thanks to @jdriven_nl for letting us host it on a powerful VM instance on Google Cloud
OWASP WebGoat
@OWASP_WebGoat
Aug 31, 2017
Tomorrow @OWASP_WebGoat will be present at @BSidesAMS with a couple of new challenges in our CTF event.

OWASP WebGoat’s posts