WebGoat — тренажёр по взлому веб-приложений

★ 9.3K

WebGoat is an open-source OWASP teaching project: a deliberately vulnerable web application for security education. Reach for it to learn to find and understand vulnerabilities in practice rather than theory: developers learn to see how their code can be broken, security specialists rehearse testing techniques, students take a course on a live example. The app deliberately contains vulnerabilities with lessons and hints, so attacking it is legal and safe — it is a trainer built to be hacked. Written in Java, it runs locally with a single deployment. The key point: WebGoat is meant for learning on YOUR own instance; applying the techniques to systems that are not yours, without permission, is illegal. An excellent starting point for understanding how common attacks work and how to defend against them.