WebGoat

• Introduction
• General
• (A1) Broken Access Control
• (A2) Cryptographic Failures
• (A3) Injection
• (A5) Security Misconfiguration
• (A6) Vuln & Outdated Components
• (A7) Identity & Auth Failure
• (A8) Software & Data Integrity
• (A9) Security Logging Failures
• (A10) Sever-Side Request Forgery
• Client Side
• Challenges

WebGoat

Home