Remediate The Flag - Practical AppSec Training Platform
Talkat OWASP AppSec Europe 2018 · on Thursday, 2018-07-05· at 11:00· St James - 4th Floor, QEII Centre Broad Sanctuary, Westminster·
summary
Open source platform Remediate The Flag provisions disposable browser-accessible development environments on demand and claims 100% hands-on remediation exercises with no multiple‑choice. Each exercise runs in Docker containers (Java, Nodejs, Ruby bases), the system uses an HTML5 RDP gateway and CloudFormation/ECS deployment, and an automated code diff plus logs and checker report whether fixes work; an assessor can override results. Catalog: ~10–12 Java, ~8 Node exercises; cost and capacity scale with concurrent containers and gateways. leaderboard and stats
AI-written summary · about
chapters (13)
- 0:00Intro
- 0:39Remediate The Flag
- 6:18Live Demo
- 14:06Architecture
- 19:06Installation
- 21:00Configuration
- 23:01Creating a new exercise
- 24:10Adding dependencies
- 25:37RTF Agent
- 26:46Reflect XSS
- 27:58Unit Tests
- 28:46Conclusion
- 29:29Questions
related talks
28mFlagship Projects: Security Shepherd
46mCapture the Flag for Developers
51mRemediation-Aware Reachability: Patching Containers, Prioritizing with Agentic-CTI, and Scaling...
20mHow to Use Your Vulnerabilities to Train Your Developers on Security
17mTools & training for more secure software
28mBreaking Barriers The Art of Free Gamified Security Training
02h 38mJava application security the hard way - a workshop for the serious developer
32mA Security State Of Mind: Compliance and ...