OWASP WebGoat (@OWASP_WebGoat) profile picture

OWASP WebGoat

@OWASP_WebGoat

Official account of the original #OWASP WebGoat ... a purposely vulnerable J2EE app & training platform to help improve #AppSec

Joined January 2017
  • Tweets26
  • Following5
  • Followers267
2Media
Photo by OWASP WebGoat (@OWASP_WebGoat)Photo by OWASP WebGoat (@OWASP_WebGoat)
Nice to see ActiveScan++ detecting this vulnerability. We have a lesson that demonstrates precisely this attack. Try out our XXE lessons...
Nate (@nnwakelam) profile pictureNate@nnwakelam1 Nov 2021
Would you expect burp suite to flag this as XXE when all that was required was changing the Content-Type to application/xml and supplying an XXE in the POST POST /endpoint Content-Type: application/json {"lol":"lol"}
2
WebGOAT - I have just completed this room! Check it out: tryhackme.com/room/webgoat #tryhackme #webgoat #testing #webapp #owasp #webgoat via @tryhackme

WebGOAT

Simple testing room for beating on WebGOAT

tryhackme.com
1
1
Have been slow to check or send out updates. Finally logging in, happy to see this sort of notification.
Siddhartha Rao 🇮🇳 (@dfirwallah) profile pictureSiddhartha Rao 🇮🇳@dfirwallah24 Sep 2018
I had never understood DOM based XSS this well ever before. This resource is giving me a lot of new info and i can feel my concepts becoming clearer. Thanks @OWASP_WebGoat . #appsec #security #xss #dom
Image from Siddhartha Rao 🇮🇳 (@dfirwallah)
2
2
Today we will host a security workshop with WebGoat at #DevoxxPL for all the participants please follow the instructions on github.com/nbaars/devoxx-pl in order to get everything up and running – at Krakow, Poland
GitHub - nbaars/devoxx-pl

GitHub - nbaars/devoxx-pl

Contribute to nbaars/devoxx-pl development by creating an account on GitHub.

github.com
1
Giving a WebGoat workshop at DevOpsCon (@devops_con) with special thanks to @jdriven_nl for letting us host it on a powerful VM instance on Google Cloud – at Berlin, Germany
Image from OWASP WebGoat (@OWASP_WebGoat)
1
Tomorrow @OWASP_WebGoat will be present at @BSidesAMS with a couple of new challenges in our CTF event.
2
5
Had some fun at AppSecEU with @owasp_juiceshop ... teapawt.net/bkimminich/status/8626…
Björn Kimminich (@bkimminich) profile pictureBjörn Kimminich@bkimminich11 May 2017
Meet #A7, the friendly @owasp troll in the member lounge at @appseceu! (©ollaborative naming idea of @owasp_webgoat and @owasp_juiceshop)
Image from Björn Kimminich (@bkimminich)
2
2
Hey @EhernandezEvin ... can we get a hand? (in OWASP Lounge), or ping us on the OWASP slack cc @misfir3
Debuting part of a new JWT lesson (old bug though it may be) as part of the challenge/CtF @AppSecEU today. #OWASP
We're getting ready for the super cyber security celebration that is #appsec EU Belfast #owasp @CMEGroup @HPE @synopsys
Image from Gary Robinson (@garydarobinson)
1
4
2
6
This looks pretty cool #OWASP #ThreatModeling #AppSec owasp.org/index.php/OWASP_Th…
Glad to have some time to be working on #OWASP WebGoat again ... in prep for version 8 and for @AppSecEU
1
1
Hope to see you at #AppSecEU linkedin.com/feed/update/urn…
Sorry ... we'll post something about WebGoat 8 progress before too long. In the meantime ... teapawt.net/EverythingGoats/status…
This Post is from a suspended account. Learn more
1
Reposting for obvious non-AppSec reasons ... ;-) teapawt.net/sweden/status/84172245…
Been quiet on twitter here for a little, but we're still plugging away on version 8 of WebGoat. Hope to be out at @AppSecEU in Belfast!
tried to give a little love to @zaproxy last night too, There's even a lesson featuring ZAP (Great Tool) to be included in v. 8 of WebGoat teapawt.net/OWASP_WebGoat/status/8…
OWASP WebGoat (@OWASP_WebGoat) profile pictureOWASP WebGoat@OWASP_WebGoat2 Feb 2017
Thanks again @owaspdc. There's still plenty work to be done & If anyone would like to contribute, DM here or @misfir3. #OWASP #AppSec
1
2
1
Thanks again @owaspdc. There's still plenty work to be done & If anyone would like to contribute, DM here or @misfir3. #OWASP #AppSec
1
2
3
OWASP WebGoat retweeted
OWASP DC (@owaspdc) profile picture
OWASP DC@owaspdc30 Jan 2017
It's not too late to get your Goat on! Web Goat, that is, with @misfir3 this Wednesday! Check it out: meetu.ps/e/CqT4V/36NxS/d
1
1
Wanted to nix httponly for WebGoat. Yep, StackOverflow has the answer! stackoverflow.com/questions/… At least dev acknowledges not a good idea
Load more