Flagship Projects: Security Shepherd
summary
OWASP Security Shepherd is a gamified CTF framework that presents real web and mobile vulnerabilities and ships as a Docker image or a VirtualBox VM running a Tomcat JSP app with MySQL backend. The project lists 42 contributors, supports multiple languages including a partial Irish translation, and offers classroom features: linear lessons then harder challenges, scoreboards with medals, admin class management, cheat sheets, and a plan to replace many tiny Android apps with a single vulnerable app.
AI-written summary · about
chapters (8)
- 0:00Start
- 7:00Admin User
- 7:36Modes
- 8:10Best Environment for Security Shepherd
- 9:27Medals
- 12:18Setup of Security Shepard and the Lesson Challenge Demonstration
- 16:50Player Management
- 21:01Registering a User
related talks
45mLeveraging Projects and Tools to Transform Your SDLC
36mApp Security Does Not Need To Be Fun: Ignoring OWASP To Have A Terrible Time
28mSecurity Does Not Need to Be Fun: Ignoring OWASP to Have a Terrible Time
27mSecurity Does Not Need to Be Fun: Ignoring OWASP to Have a Terrible Time
08mRunning an Appsec Program with Open Source Projects"
58mSqueezing The Last Drop Out Of OWASP Juice Shop
38mFree security resources that your competitors use!
30mSecurity by Stealth