Welcome to the Wargame Nexus
Learn to Hack Harder!
OWASP Juice Shop | OWASP Foundation
owasp.orgProbably the most modern and sophisticated insecure web application for security trainings, awareness demos and CTFs. Also great voluntary guinea pig for your security tools and DevSecOps pipelines!
Running OWASP Juice Shop with Root-the-Box on Google Cloud Platform
So I am back at teaching web application security. This time I wanted to setup a CTF challenge for my students. To not reinvent the wheel, or rather, to stand on the shoulders of giants I am reusing the OWASP Juice Shop vulnerable web app in its CTF mode. Normally I would teach at a (physical) lab which would make the setup easy: all students are situated in the same physical room, I can setup the game server on my laptop and distribute virtual machines containing the vulnerable web app over the local network. Well, that thing called COVID-19 happened so this is not an option right now.
Online IT/Security Training
A list of online IT and infosec training resources.
Setting up a web application penetration testing laboratory with Terraform and Docker
How to build a beginner-friendly web application penetration testing laboratory in the Amazon cloud using Terraform and Docker.