wattzgoat-web
A practice environment for finding security issues in an intentionally vulnerable web app.
SITE CAPTUREBased on information published on the service's website. Selection and review policy
WHAT IT DOES
What does it do?
WattzGOAT is a web app for security practice that simulates a fictional smart meter company portal. Users exploit vulnerabilities such as access control flaws and injection to find flags hidden on the site. The app and database can run in a single Docker container.
KEY FEATURES
Key features
- Explore the customer portal and admin features to find vulnerabilities.
- Exploit vulnerabilities to capture 48 hidden flags.
- Enter discovered flags on a progress page to track them.
- Run a Docker container from a prepared image or source code.