OWASP Hackademic Challenges Logo

OWASP Hackademic Challenges

0
Free
Visit Website

The Hackademic Challenges implement realistic scenarios with known vulnerabilities in a safe and controllable environment. Users can attempt to discover and exploit these vulnerabilities in order to learn important concepts of information security through an attacker's perspective. Currently, there are 10 scenarios available. You can choose to start from the one that you find most appealing, although we suggest to follow the order presented on the first page. We intend to expand the available challenges with additional scenarios that involve cryptography, and even vulnerable systems being implemented in downloadable virtual machines. Deployment Dependencies of Hackademic involve a web server (Apache, nginx) with PHP and Mysql/MariaDB connected with it. Make sure you have installed these before you start deploying Hackademic. We recommand to use Apache as the web server.

FEATURES

ALTERNATIVES

Guidelines for secure coding in Java SE to avoid bugs that could weaken security and open holes in Java's security features.

StepSecurity is a platform that enhances GitHub Actions security by providing network egress control, risk discovery, action replacement, and security best practices orchestration.

An API security platform that discovers, documents, and tests APIs throughout the development lifecycle while maintaining a centralized catalog of all API assets.

A fake Django admin login screen to detect and notify admins of attempted unauthorized access

CSRF crumb generation and validation tool for hapi framework.

cwe_checker is a suite of checks to detect common bug classes in ELF binaries using Ghidra for firmware analysis.

Firejail is a SUID sandbox program for restricting the running environment of untrusted applications on Linux.

A cloud-based web application firewall that provides protection against web attacks, DDoS mitigation, and performance optimization through CDN capabilities.

PINNED