WebGoat

The WebGoat XXE (XML External Entity) section has 3 exercises. The first 2 are pretty easy, the last one quite […]

The OWASP WebGoat SQL Injection Mitigation lesson 8 is another blind SQL exercise, very similar to the SQL advanced lesson

Last week I wrote about the OWASP WebGoat XSS lessons. Today I’d like to write a few pointers on how to

I recently installed WebGoat, a deliberately vulnerable web app with built-in lessons. While some of the lessons are very easy, they