OWASP WebGoat

Official account of the original #OWASP WebGoat ... a purposely vulnerable J2EE app & training platform to help improve #AppSec

[OWASP WebGoat @OWASP_WebGoat]

Nice to see ActiveScan++ detecting this vulnerability. We have a lesson that demonstrates precisely this attack. Try out our XXE lessons...

[Nate @nnwakelam]

Would you expect burp suite to flag this as XXE when all that was required was changing the Content-Type to application/xml and supplying an XXE in the POST

POST /endpoint
Content-Type: application/json

{"lol":"lol"}

[Eduardo Ellery @EduardoEllery]

WebGOAT - I have just completed this room! Check it out: https://t.co/uYJoVbuPEc #tryhackme #webgoat #testing #webapp #owasp #webgoat via @tryhackme

[OWASP WebGoat @OWASP_WebGoat]

Have been slow to check or send out updates. Finally logging in, happy to see this sort of notification.

[Siddhartha Rao 🇮🇳 @dfirwallah]

I had never understood DOM based XSS this well ever before. This resource is giving me a lot of new info and i can feel my concepts becoming clearer. Thanks @OWASP_WebGoat . #appsec #security #xss #dom

[OWASP WebGoat @OWASP_WebGoat]

Today we will host a security workshop with WebGoat at #DevoxxPL for all the participants please follow the instructions on https://t.co/nq3rSYfFfe in order to get everything up and running

[OWASP WebGoat @OWASP_WebGoat]

Giving a WebGoat workshop at DevOpsCon (@devops_con) with special thanks to @jdriven_nl for letting us host it on a powerful VM instance on Google Cloud

[OWASP WebGoat @OWASP_WebGoat]

Tomorrow @OWASP_WebGoat will be present at @BSidesAMS with a couple of new challenges in our CTF event.

[OWASP WebGoat @OWASP_WebGoat]

@0xmchow @apiary Curious what you did do ... Likely a good call to not try go 'fix' WebGoat. ;-)

[OWASP WebGoat @OWASP_WebGoat]

Had some fun at AppSecEU with @owasp_juiceshop ... https://t.co/JcBtjs1adZ

[Björn Kimminich @bkimminich]

Meet #A7, the friendly @owasp troll in the member lounge at @appseceu! (©ollaborative naming idea of @owasp_webgoat and @owasp_juiceshop)

[OWASP WebGoat @OWASP_WebGoat]

Hey @EhernandezEvin ... can we get a hand? (in OWASP Lounge), or ping us on the OWASP slack cc @misfir3

[OWASP WebGoat @OWASP_WebGoat]

Debuting part of a new JWT lesson (old bug though it may be) as part of the challenge/CtF @AppSecEU today. #OWASP

[Gary Robinson @garydarobinson]

We're getting ready for the super cyber security celebration that is #appsec EU Belfast #owasp @CMEGroup @HPE @synopsys

[OWASP WebGoat @OWASP_WebGoat]

This looks pretty cool #OWASP #ThreatModeling #AppSec https://t.co/0a6GUi44he

[OWASP WebGoat @OWASP_WebGoat]

Glad to have some time to be working on #OWASP WebGoat again ... in prep for version 8 and for @AppSecEU

[OWASP WebGoat @OWASP_WebGoat]

Hope to see you at #AppSecEU https://t.co/0Jshqj4H5O

[OWASP WebGoat @OWASP_WebGoat]

Sorry ... we'll post something about WebGoat 8 progress before too long. In the meantime ... https://t.co/dUfnhsS9jO

[OWASP WebGoat @OWASP_WebGoat]

Reposting for obvious non-AppSec reasons ... ;-) https://t.co/DMCw61teqK

[OWASP WebGoat @OWASP_WebGoat]

Been quiet on twitter here for a little, but we're still plugging away on version 8 of WebGoat. Hope to be out at @AppSecEU in Belfast!

[OWASP WebGoat @OWASP_WebGoat]

@zaproxy sample screen shot ...

[OWASP WebGoat @OWASP_WebGoat]

tried to give a little love to @zaproxy last night too, There's even a lesson featuring ZAP (Great Tool) to be included in v. 8 of WebGoat https://t.co/cS4hsjK8tj

[OWASP WebGoat @OWASP_WebGoat]

Thanks again @owaspdc. There's still plenty work to be done & If anyone would like to contribute, DM here or @misfir3. #OWASP #AppSec

[OWASP WebGoat @OWASP_WebGoat]

Thanks again @owaspdc. There's still plenty work to be done & If anyone would like to contribute, DM here or @misfir3. #OWASP #AppSec