OWASP - User contributions [en]

OWASP Hacking Lab

2017-10-17T12:12:23Z

Ivan Buetler: update broken links

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| style="border-right: 1px dotted gray;padding-right:25px;" valign="top" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/eventregister.html?event=245 OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/eventregister.html?event=302 OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/eventregister.html?event=557 OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" valign="top" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/eventregister.html?event=245 OWASP Top 10]
* [https://www.hacking-lab.com/events/eventregister.html?event=302 OWASP WebGoat]
* [https://www.hacking-lab.com/events/eventregister.html?event=557 OWASP Hackademic]
* [https://www.owasp.org/index.php/OWASP_University_Challenge University Challenge]
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

[[File:pdf-icon.png|Download PDF]] [[Media:HL CTF 2016.pdf|HL CTF 2016.pdf]]

[[File:ppt-icon.png|Download Power Point]] [[Media:HL CTF 2016.pptx|HL CTF 2016.pptx]]

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

* [https://www.ohloh.net/p/Hacking_Lab Ohloh: Hacking-Lab]

| style="padding-left:25px;width:200px;" valign="top" |

== Quick Download ==

[[File:zip-icon.png|Download ZIP]] [[Media:Challenge_development_by_OWASP.zip|Challenge Concept Template]]

== News and Events ==

* [https://www.owasp.org/index.php/OWASP_University_Challenge University Challenge]
* [http://www.europeancybersecuritychallenge.eu/ European Challenge]

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| rowspan="2" width="50%" valign="top" align="center" | [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| width="50%" valign="top" align="center" | [[File:Owasp-builders-small.png|link=]]
|-
| width="50%" valign="top" align="center" | [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

===Attack-Defense System===
[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=European Challenge=
== European Cyber Security Challenge 2016 ==

=== Introduction ===
[[File:Ecsc-logo.png|left|European Cyber Security Challenge]]Today, most countries lack sufficient IT security professionals to protect their IT infrastructure. To help mitigate this problem, many of them set up national cyber security competitions for finding young cyber talents and for encouraging them to pursue a career in cyber security.

The European Cyber Security Challenge (ECSC) leverages these competitions in that it adds a pan-European layer to them: The top cyber talents from each country meet to network and collaborate and finally compete against each other to determine which country has the best cyber talents. To find out which country's team is the best, contestants have to solve security related tasks from domains such as web security, mobile security, crypto puzzles, reverse engineering and forensics and collect points for solving them.

=== How to join the ECSC 2016 ===
* [http://www.europeancybersecuritychallenge.eu/2016/join/ How to join the ECSC 2016]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs></headertabs>

[[Category:OWASP Project]]
[[Category:OWASP_Builders]]
[[Category:OWASP_Defenders]]
[[Category:OWASP_Document]]

OWASP Hacking Lab

2017-10-17T12:10:54Z

Ivan Buetler: update broken links

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| style="border-right: 1px dotted gray;padding-right:25px;" valign="top" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/eventregister.html?event=245 OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/eventregister.html?event=302 OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/eventregister.html?event=557 OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" valign="top" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* [https://www.owasp.org/index.php/OWASP_University_Challenge University Challenge]
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

[[File:pdf-icon.png|Download PDF]] [[Media:HL CTF 2016.pdf|HL CTF 2016.pdf]]

[[File:ppt-icon.png|Download Power Point]] [[Media:HL CTF 2016.pptx|HL CTF 2016.pptx]]

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

* [https://www.ohloh.net/p/Hacking_Lab Ohloh: Hacking-Lab]

| style="padding-left:25px;width:200px;" valign="top" |

== Quick Download ==

[[File:zip-icon.png|Download ZIP]] [[Media:Challenge_development_by_OWASP.zip|Challenge Concept Template]]

== News and Events ==

* [https://www.owasp.org/index.php/OWASP_University_Challenge University Challenge]
* [http://www.europeancybersecuritychallenge.eu/ European Challenge]

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| rowspan="2" width="50%" valign="top" align="center" | [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| width="50%" valign="top" align="center" | [[File:Owasp-builders-small.png|link=]]
|-
| width="50%" valign="top" align="center" | [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

===Attack-Defense System===
[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=European Challenge=
== European Cyber Security Challenge 2016 ==

=== Introduction ===
[[File:Ecsc-logo.png|left|European Cyber Security Challenge]]Today, most countries lack sufficient IT security professionals to protect their IT infrastructure. To help mitigate this problem, many of them set up national cyber security competitions for finding young cyber talents and for encouraging them to pursue a career in cyber security.

The European Cyber Security Challenge (ECSC) leverages these competitions in that it adds a pan-European layer to them: The top cyber talents from each country meet to network and collaborate and finally compete against each other to determine which country has the best cyber talents. To find out which country's team is the best, contestants have to solve security related tasks from domains such as web security, mobile security, crypto puzzles, reverse engineering and forensics and collect points for solving them.

=== How to join the ECSC 2016 ===
* [http://www.europeancybersecuritychallenge.eu/2016/join/ How to join the ECSC 2016]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs></headertabs>

[[Category:OWASP Project]]
[[Category:OWASP_Builders]]
[[Category:OWASP_Defenders]]
[[Category:OWASP_Document]]

User:Ivan Buetler

2017-10-17T12:03:05Z

Ivan Buetler: bio update

Ivan Buetler is a renowned security expert in the field of cyber security. He started his career by co-founding and developing Compass Security AG, a leading ethical hacking and penetration testing company headquartered in Switzerland near Zurich with its subsidiaries in Berne and Berlin. Several of his publications on network and computer security have raised international recognition. Besides his own business, he is a tutor at several Swiss Universities, where he lectures in the field of '''Hacking''', '''Cyber Crime''' and '''Advanced Persistent Threats'''. Ivan is a regular speaker at international security conferences. He is in the board of the Swiss Cyber Storm association and responsible for the European Cyber Security Challenge. He is the founder of Hacking-Lab, a world-wide recognized ethical hacking testing lab. Additionally, he is leading and volunteering the [[OWASP Hacking Lab|OWASP/Hacking-Lab]] project and an acknowledged security expert at the Swiss Academy of Engineering Sciences (SATW).

User:Ivan Buetler

2017-10-17T12:02:38Z

Ivan Buetler: bio update

OWASP University Challenge

2016-07-07T14:27:51Z

Ivan Buetler: /* Presentation */

OWASP Hacking Lab

2016-07-07T14:25:17Z

Ivan Buetler: /* Ohloh */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* [https://www.owasp.org/index.php/OWASP_University_Challenge University Challenge]
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

[[File:pdf-icon.png|Download PDF]] [[Media:HL CTF 2016.pdf|HL CTF 2016.pdf]]

[[File:ppt-icon.png|Download Power Point]] [[Media:HL CTF 2016.pptx|HL CTF 2016.pptx]]

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

* [https://www.ohloh.net/p/Hacking_Lab Ohloh: Hacking-Lab]

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

[[File:zip-icon.png|Download ZIP]] [[Media:Challenge_development_by_OWASP.zip|Challenge Concept Template]]

== News and Events ==

* [https://www.owasp.org/index.php/OWASP_University_Challenge University Challenge]
* [http://www.europeancybersecuritychallenge.eu/ European Challenge]

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

===Attack-Defense System===
[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=European Challenge=
== European Cyber Security Challenge 2016 ==

=== Introduction ===
[[File:Ecsc-logo.png|left|European Cyber Security Challenge]]Today, most countries lack sufficient IT security professionals to protect their IT infrastructure. To help mitigate this problem, many of them set up national cyber security competitions for finding young cyber talents and for encouraging them to pursue a career in cyber security.

The European Cyber Security Challenge (ECSC) leverages these competitions in that it adds a pan-European layer to them: The top cyber talents from each country meet to network and collaborate and finally compete against each other to determine which country has the best cyber talents. To find out which country's team is the best, contestants have to solve security related tasks from domains such as web security, mobile security, crypto puzzles, reverse engineering and forensics and collect points for solving them.

=== How to join the ECSC 2016 ===
* [http://www.europeancybersecuritychallenge.eu/2016/join/ How to join the ECSC 2016]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

OWASP Hacking Lab

2016-07-07T14:25:05Z

Ivan Buetler: /* Ohloh */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* [https://www.owasp.org/index.php/OWASP_University_Challenge University Challenge]
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

[[File:pdf-icon.png|Download PDF]] [[Media:HL CTF 2016.pdf|HL CTF 2016.pdf]]

[[File:ppt-icon.png|Download Power Point]] [[Media:HL CTF 2016.pptx|HL CTF 2016.pptx]]

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

* [https://www.ohloh.net/p/Hacking_Lab Ohloh:Hacking-Lab]

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

[[File:zip-icon.png|Download ZIP]] [[Media:Challenge_development_by_OWASP.zip|Challenge Concept Template]]

== News and Events ==

* [https://www.owasp.org/index.php/OWASP_University_Challenge University Challenge]
* [http://www.europeancybersecuritychallenge.eu/ European Challenge]

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

===Attack-Defense System===
[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=European Challenge=
== European Cyber Security Challenge 2016 ==

=== Introduction ===
[[File:Ecsc-logo.png|left|European Cyber Security Challenge]]Today, most countries lack sufficient IT security professionals to protect their IT infrastructure. To help mitigate this problem, many of them set up national cyber security competitions for finding young cyber talents and for encouraging them to pursue a career in cyber security.

The European Cyber Security Challenge (ECSC) leverages these competitions in that it adds a pan-European layer to them: The top cyber talents from each country meet to network and collaborate and finally compete against each other to determine which country has the best cyber talents. To find out which country's team is the best, contestants have to solve security related tasks from domains such as web security, mobile security, crypto puzzles, reverse engineering and forensics and collect points for solving them.

=== How to join the ECSC 2016 ===
* [http://www.europeancybersecuritychallenge.eu/2016/join/ How to join the ECSC 2016]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

OWASP Hacking Lab

2016-07-07T14:24:47Z

Ivan Buetler: /* Ohloh */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* [https://www.owasp.org/index.php/OWASP_University_Challenge University Challenge]
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

[[File:pdf-icon.png|Download PDF]] [[Media:HL CTF 2016.pdf|HL CTF 2016.pdf]]

[[File:ppt-icon.png|Download Power Point]] [[Media:HL CTF 2016.pptx|HL CTF 2016.pptx]]

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

* [https://www.ohloh.net/p/Hacking_Lab Hacking-Lab Ohloh]

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

[[File:zip-icon.png|Download ZIP]] [[Media:Challenge_development_by_OWASP.zip|Challenge Concept Template]]

== News and Events ==

* [https://www.owasp.org/index.php/OWASP_University_Challenge University Challenge]
* [http://www.europeancybersecuritychallenge.eu/ European Challenge]

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

===Attack-Defense System===
[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=European Challenge=
== European Cyber Security Challenge 2016 ==

=== Introduction ===
[[File:Ecsc-logo.png|left|European Cyber Security Challenge]]Today, most countries lack sufficient IT security professionals to protect their IT infrastructure. To help mitigate this problem, many of them set up national cyber security competitions for finding young cyber talents and for encouraging them to pursue a career in cyber security.

The European Cyber Security Challenge (ECSC) leverages these competitions in that it adds a pan-European layer to them: The top cyber talents from each country meet to network and collaborate and finally compete against each other to determine which country has the best cyber talents. To find out which country's team is the best, contestants have to solve security related tasks from domains such as web security, mobile security, crypto puzzles, reverse engineering and forensics and collect points for solving them.

=== How to join the ECSC 2016 ===
* [http://www.europeancybersecuritychallenge.eu/2016/join/ How to join the ECSC 2016]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

OWASP Hacking Lab

2016-07-07T14:24:23Z

Ivan Buetler: /* Ohloh */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* [https://www.owasp.org/index.php/OWASP_University_Challenge University Challenge]
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

[[File:pdf-icon.png|Download PDF]] [[Media:HL CTF 2016.pdf|HL CTF 2016.pdf]]

[[File:ppt-icon.png|Download Power Point]] [[Media:HL CTF 2016.pptx|HL CTF 2016.pptx]]

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

* [https://www.ohloh.net/p/Hacking_Lab Hacking-Lab]

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

[[File:zip-icon.png|Download ZIP]] [[Media:Challenge_development_by_OWASP.zip|Challenge Concept Template]]

== News and Events ==

* [https://www.owasp.org/index.php/OWASP_University_Challenge University Challenge]
* [http://www.europeancybersecuritychallenge.eu/ European Challenge]

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

===Attack-Defense System===
[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=European Challenge=
== European Cyber Security Challenge 2016 ==

=== Introduction ===
[[File:Ecsc-logo.png|left|European Cyber Security Challenge]]Today, most countries lack sufficient IT security professionals to protect their IT infrastructure. To help mitigate this problem, many of them set up national cyber security competitions for finding young cyber talents and for encouraging them to pursue a career in cyber security.

The European Cyber Security Challenge (ECSC) leverages these competitions in that it adds a pan-European layer to them: The top cyber talents from each country meet to network and collaborate and finally compete against each other to determine which country has the best cyber talents. To find out which country's team is the best, contestants have to solve security related tasks from domains such as web security, mobile security, crypto puzzles, reverse engineering and forensics and collect points for solving them.

=== How to join the ECSC 2016 ===
* [http://www.europeancybersecuritychallenge.eu/2016/join/ How to join the ECSC 2016]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

OWASP Hacking Lab

2016-07-07T14:23:28Z

Ivan Buetler: /* News and Events */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* [https://www.owasp.org/index.php/OWASP_University_Challenge University Challenge]
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

[[File:pdf-icon.png|Download PDF]] [[Media:HL CTF 2016.pdf|HL CTF 2016.pdf]]

[[File:ppt-icon.png|Download Power Point]] [[Media:HL CTF 2016.pptx|HL CTF 2016.pptx]]

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

*https://www.ohloh.net/p/Hacking_Lab

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

[[File:zip-icon.png|Download ZIP]] [[Media:Challenge_development_by_OWASP.zip|Challenge Concept Template]]

== News and Events ==

* [https://www.owasp.org/index.php/OWASP_University_Challenge University Challenge]
* [http://www.europeancybersecuritychallenge.eu/ European Challenge]

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

===Attack-Defense System===
[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=European Challenge=
== European Cyber Security Challenge 2016 ==

=== Introduction ===
[[File:Ecsc-logo.png|left|European Cyber Security Challenge]]Today, most countries lack sufficient IT security professionals to protect their IT infrastructure. To help mitigate this problem, many of them set up national cyber security competitions for finding young cyber talents and for encouraging them to pursue a career in cyber security.

The European Cyber Security Challenge (ECSC) leverages these competitions in that it adds a pan-European layer to them: The top cyber talents from each country meet to network and collaborate and finally compete against each other to determine which country has the best cyber talents. To find out which country's team is the best, contestants have to solve security related tasks from domains such as web security, mobile security, crypto puzzles, reverse engineering and forensics and collect points for solving them.

=== How to join the ECSC 2016 ===
* [http://www.europeancybersecuritychallenge.eu/2016/join/ How to join the ECSC 2016]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

OWASP University Challenge

2016-07-07T14:00:31Z

Ivan Buetler: /* What is the OWASP University Challenge? */

OWASP University Challenge

2016-07-07T14:00:02Z

Ivan Buetler: /* What is the OWASP University Challenge? */

OWASP University Challenge

2016-07-07T13:59:32Z

Ivan Buetler: /* What is the OWASP University Challenge? */

OWASP University Challenge

2016-07-07T13:57:17Z

Ivan Buetler: /* Acknowledgements */

OWASP University Challenge

2016-07-07T13:56:23Z

Ivan Buetler: /* Hacking-Lab */

OWASP Hacking Lab

2016-07-07T13:51:17Z

Ivan Buetler: /* What is Hacking Lab */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* [https://www.owasp.org/index.php/OWASP_University_Challenge University Challenge]
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

[[File:pdf-icon.png|Download PDF]] [[Media:HL CTF 2016.pdf|HL CTF 2016.pdf]]

[[File:ppt-icon.png|Download Power Point]] [[Media:HL CTF 2016.pptx|HL CTF 2016.pptx]]

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

*https://www.ohloh.net/p/Hacking_Lab

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

[[File:zip-icon.png|Download ZIP]] [[Media:Challenge_development_by_OWASP.zip|Challenge Concept Template]]

== News and Events ==

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

===Attack-Defense System===
[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=European Challenge=
== European Cyber Security Challenge 2016 ==

=== Introduction ===
[[File:Ecsc-logo.png|left|European Cyber Security Challenge]]Today, most countries lack sufficient IT security professionals to protect their IT infrastructure. To help mitigate this problem, many of them set up national cyber security competitions for finding young cyber talents and for encouraging them to pursue a career in cyber security.

The European Cyber Security Challenge (ECSC) leverages these competitions in that it adds a pan-European layer to them: The top cyber talents from each country meet to network and collaborate and finally compete against each other to determine which country has the best cyber talents. To find out which country's team is the best, contestants have to solve security related tasks from domains such as web security, mobile security, crypto puzzles, reverse engineering and forensics and collect points for solving them.

=== How to join the ECSC 2016 ===
* [http://www.europeancybersecuritychallenge.eu/2016/join/ How to join the ECSC 2016]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

OWASP Hacking Lab

2016-07-07T13:50:00Z

Ivan Buetler: /* European Cyber Security Challenge 2016 */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* University Challenges
* Fun Challenges
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

[[File:pdf-icon.png|Download PDF]] [[Media:HL CTF 2016.pdf|HL CTF 2016.pdf]]

[[File:ppt-icon.png|Download Power Point]] [[Media:HL CTF 2016.pptx|HL CTF 2016.pptx]]

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

*https://www.ohloh.net/p/Hacking_Lab

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

[[File:zip-icon.png|Download ZIP]] [[Media:Challenge_development_by_OWASP.zip|Challenge Concept Template]]

== News and Events ==

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

===Attack-Defense System===
[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=European Challenge=
== European Cyber Security Challenge 2016 ==

=== Introduction ===
[[File:Ecsc-logo.png|left|European Cyber Security Challenge]]Today, most countries lack sufficient IT security professionals to protect their IT infrastructure. To help mitigate this problem, many of them set up national cyber security competitions for finding young cyber talents and for encouraging them to pursue a career in cyber security.

The European Cyber Security Challenge (ECSC) leverages these competitions in that it adds a pan-European layer to them: The top cyber talents from each country meet to network and collaborate and finally compete against each other to determine which country has the best cyber talents. To find out which country's team is the best, contestants have to solve security related tasks from domains such as web security, mobile security, crypto puzzles, reverse engineering and forensics and collect points for solving them.

=== How to join the ECSC 2016 ===
* [http://www.europeancybersecuritychallenge.eu/2016/join/ How to join the ECSC 2016]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

OWASP Hacking Lab

2016-07-07T13:49:29Z

Ivan Buetler: /* Introduction */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* University Challenges
* Fun Challenges
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

[[File:pdf-icon.png|Download PDF]] [[Media:HL CTF 2016.pdf|HL CTF 2016.pdf]]

[[File:ppt-icon.png|Download Power Point]] [[Media:HL CTF 2016.pptx|HL CTF 2016.pptx]]

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

*https://www.ohloh.net/p/Hacking_Lab

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

[[File:zip-icon.png|Download ZIP]] [[Media:Challenge_development_by_OWASP.zip|Challenge Concept Template]]

== News and Events ==

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

===Attack-Defense System===
[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=European Challenge=
== European Cyber Security Challenge 2016 ==

=== Introduction ===
[[File:Ecsc-logo.png|left|European Cyber Security Challenge]]Today, most countries lack sufficient IT security professionals to protect their IT infrastructure. To help mitigate this problem, many of them set up national cyber security competitions for finding young cyber talents and for encouraging them to pursue a career in cyber security.

The European Cyber Security Challenge (ECSC) leverages these competitions in that it adds a pan-European layer to them: The top cyber talents from each country meet to network and collaborate and finally compete against each other to determine which country has the best cyber talents. To find out which country's team is the best, contestants have to solve security related tasks from domains such as web security, mobile security, crypto puzzles, reverse engineering and forensics and collect points for solving them.

=== How to join the ECSC 2016 ===
* [http://www.europeancybersecuritychallenge.eu/2016/join/ How to join the ECSC 2016]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

File:Ecsc-logo.png

2016-07-07T13:48:31Z

Ivan Buetler:

OWASP Hacking Lab

2016-07-07T13:46:22Z

Ivan Buetler: /* European Challenge */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* University Challenges
* Fun Challenges
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

[[File:pdf-icon.png|Download PDF]] [[Media:HL CTF 2016.pdf|HL CTF 2016.pdf]]

[[File:ppt-icon.png|Download Power Point]] [[Media:HL CTF 2016.pptx|HL CTF 2016.pptx]]

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

*https://www.ohloh.net/p/Hacking_Lab

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

[[File:zip-icon.png|Download ZIP]] [[Media:Challenge_development_by_OWASP.zip|Challenge Concept Template]]

== News and Events ==

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

===Attack-Defense System===
[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=European Challenge=
== European Cyber Security Challenge 2016 ==

=== Introduction ===
Today, most countries lack sufficient IT security professionals to protect their IT infrastructure. To help mitigate this problem, many of them set up national cyber security competitions for finding young cyber talents and for encouraging them to pursue a career in cyber security.

The European Cyber Security Challenge (ECSC) leverages these competitions in that it adds a pan-European layer to them: The top cyber talents from each country meet to network and collaborate and finally compete against each other to determine which country has the best cyber talents. To find out which country's team is the best, contestants have to solve security related tasks from domains such as web security, mobile security, crypto puzzles, reverse engineering and forensics and collect points for solving them.

=== How to join the ECSC 2016 ===
* [http://www.europeancybersecuritychallenge.eu/2016/join/ How to join the ECSC 2016]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

OWASP Hacking Lab

2016-07-07T13:40:08Z

Ivan Buetler: /* University Challenge */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* University Challenges
* Fun Challenges
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

[[File:pdf-icon.png|Download PDF]] [[Media:HL CTF 2016.pdf|HL CTF 2016.pdf]]

[[File:ppt-icon.png|Download Power Point]] [[Media:HL CTF 2016.pptx|HL CTF 2016.pptx]]

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

*https://www.ohloh.net/p/Hacking_Lab

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

[[File:zip-icon.png|Download ZIP]] [[Media:Challenge_development_by_OWASP.zip|Challenge Concept Template]]

== News and Events ==

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

===Attack-Defense System===
[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=European Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

===Attack-Defense System===
[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

OWASP Hacking Lab

2016-07-07T13:37:19Z

Ivan Buetler: /* Quick Download */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* University Challenges
* Fun Challenges
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

[[File:pdf-icon.png|Download PDF]] [[Media:HL CTF 2016.pdf|HL CTF 2016.pdf]]

[[File:ppt-icon.png|Download Power Point]] [[Media:HL CTF 2016.pptx|HL CTF 2016.pptx]]

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

*https://www.ohloh.net/p/Hacking_Lab

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

[[File:zip-icon.png|Download ZIP]] [[Media:Challenge_development_by_OWASP.zip|Challenge Concept Template]]

== News and Events ==

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

===Attack-Defense System===
[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

File:Challenge development by OWASP.zip

2016-07-07T13:35:35Z

Ivan Buetler:

File:Zip-icon.png

2016-07-07T13:32:25Z

Ivan Buetler:

OWASP Hacking Lab

2016-07-07T13:26:17Z

Ivan Buetler: /* Presentation */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* University Challenges
* Fun Challenges
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

[[File:pdf-icon.png|Download PDF]] [[Media:HL CTF 2016.pdf|HL CTF 2016.pdf]]

[[File:ppt-icon.png|Download Power Point]] [[Media:HL CTF 2016.pptx|HL CTF 2016.pptx]]

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

*https://www.ohloh.net/p/Hacking_Lab

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

* Link to page/download

== News and Events ==

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

===Attack-Defense System===
[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

OWASP Hacking Lab

2016-07-07T13:23:39Z

Ivan Buetler: /* Presentation */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* University Challenges
* Fun Challenges
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

*https://www.ohloh.net/p/Hacking_Lab

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

* Link to page/download

== News and Events ==

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

===Attack-Defense System===
[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

OWASP Hacking Lab

2016-07-07T13:23:18Z

Ivan Buetler: /* Presentation */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* University Challenges
* Fun Challenges
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

[[File:pdf-icon.png|Download PDF]] [[Media:HL CTF 2016.pdf]]

[[File:ppt-icon.png|Download Power Point|link=HL CTF 2016.pptx]]

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

*https://www.ohloh.net/p/Hacking_Lab

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

* Link to page/download

== News and Events ==

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

===Attack-Defense System===
[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

OWASP Hacking Lab

2016-07-07T13:12:51Z

Ivan Buetler: /* Presentation */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* University Challenges
* Fun Challenges
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

*https://www.ohloh.net/p/Hacking_Lab

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

* Link to page/download

== News and Events ==

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

===Attack-Defense System===
[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

OWASP Hacking Lab

2016-07-07T13:12:29Z

Ivan Buetler: /* Presentation */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* University Challenges
* Fun Challenges
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

[[File:pdf-icon.png|Download PDF]] [[Media:HL CTF 2016.pdf]]

[[File:word-icon.png|Download Power Point]] [[Media:HL CTF 2016.pptx]]

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

*https://www.ohloh.net/p/Hacking_Lab

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

* Link to page/download

== News and Events ==

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

===Attack-Defense System===
[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

OWASP Hacking Lab

2016-07-07T13:09:17Z

Ivan Buetler: /* Presentation */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* University Challenges
* Fun Challenges
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

*https://www.ohloh.net/p/Hacking_Lab

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

* Link to page/download

== News and Events ==

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

===Attack-Defense System===
[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

OWASP Hacking Lab

2016-07-07T13:08:45Z

Ivan Buetler: /* Presentation */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* University Challenges
* Fun Challenges
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

[[File:pdf-icon.png|Download PDF]] [[File:HL CTF 2016.pdf]]

[[File:word-icon.png|Download Power Point]] [[File:HL CTF 2016.pptx]]

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

*https://www.ohloh.net/p/Hacking_Lab

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

* Link to page/download

== News and Events ==

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

===Attack-Defense System===
[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

OWASP Hacking Lab

2016-07-07T13:07:25Z

Ivan Buetler: /* Presentation */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* University Challenges
* Fun Challenges
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

Link to presentation

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

*https://www.ohloh.net/p/Hacking_Lab

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

* Link to page/download

== News and Events ==

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

===Attack-Defense System===
[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

OWASP Hacking Lab

2016-07-07T13:07:05Z

Ivan Buetler: /* Presentation */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* University Challenges
* Fun Challenges
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

Link to presentation
*[[File:pdf-icon.png|left|Download PDF]] [[File:HL CTF 2016.pdf]]

*[[File:word-icon.png|left|Download Power Point]] [[File:HL CTF 2016.pptx]]

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

*https://www.ohloh.net/p/Hacking_Lab

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

* Link to page/download

== News and Events ==

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

===Attack-Defense System===
[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

File:Ppt-icon.png

2016-07-07T13:05:51Z

Ivan Buetler:

File:Pdf-icon.png

2016-07-07T12:59:36Z

Ivan Buetler:

File:Word-icon.png

2016-07-07T12:59:23Z

Ivan Buetler:

File:HL CTF 2016.pptx

2016-07-07T12:56:13Z

Ivan Buetler:

File:HL CTF 2016.pdf

2016-07-07T12:54:40Z

Ivan Buetler:

OWASP University Challenge

2016-07-07T12:47:26Z

Ivan Buetler: /* Road Map and Getting Involved */

OWASP Hacking Lab

2016-07-07T11:58:04Z

Ivan Buetler: /* News and Events */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* University Challenges
* Fun Challenges
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

Link to presentation

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

*https://www.ohloh.net/p/Hacking_Lab

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

* Link to page/download

== News and Events ==

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

===Attack-Defense System===
[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

OWASP Hacking Lab

2016-07-07T11:56:35Z

Ivan Buetler: /* Introduction */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* University Challenges
* Fun Challenges
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

Link to presentation

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

*https://www.ohloh.net/p/Hacking_Lab

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

* Link to page/download

== News and Events ==
* [20 Nov 2013] News 2
* [30 Sep 2013] News 1

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

===Attack-Defense System===
[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

OWASP Hacking Lab

2016-07-07T11:55:20Z

Ivan Buetler: /* Introduction */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* University Challenges
* Fun Challenges
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

Link to presentation

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

*https://www.ohloh.net/p/Hacking_Lab

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

* Link to page/download

== News and Events ==
* [20 Nov 2013] News 2
* [30 Sep 2013] News 1

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

[[File:Attack-Defense.png|left|Hacking-Lab]]
The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system.

If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

OWASP Hacking Lab

2016-07-07T11:52:45Z

Ivan Buetler: /* Questions */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* University Challenges
* Fun Challenges
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

Link to presentation

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

*https://www.ohloh.net/p/Hacking_Lab

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

* Link to page/download

== News and Events ==
* [20 Nov 2013] News 2
* [30 Sep 2013] News 1

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review [https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs University Challenge FAQ]

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

OWASP Hacking Lab

2016-07-07T11:51:43Z

Ivan Buetler: /* Rating: */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* University Challenges
* Fun Challenges
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

Link to presentation

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

*https://www.ohloh.net/p/Hacking_Lab

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

* Link to page/download

== News and Events ==
* [20 Nov 2013] News 2
* [30 Sep 2013] News 1

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
***'''3 Points for vulnerability description'''
***'''3 Points for proven exploit'''
***'''4 Points for complete mitigation description'''

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review UC faq: https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

OWASP Hacking Lab

2016-07-07T11:49:13Z

Ivan Buetler: /* About Hacking-Lab */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Hacking Lab==

OWASP Hacking Lab is providing free remote security (web) challenges and riddles (OWASP TOP 10, OWASP WebGoat, OWASP Hackademics). It differs from other damn vulnerable applications and sites with it's unique teacher application. Every challenge is asking for the vulnerability, exploit and mitigation. Send in your solution and other OWASP volunteers will grade your submission. A system where you can interact with human beings.

===About Hacking-Lab===
[[File:Hacking-Lab.png|left|Hacking-Lab]]Hacking-Lab is an online ethical hacking, computer network and security challenge platform, dedicated to finding and educating cyber security talents. Furthermore, Hacking-Lab is providing the CTF and mission style challenges for the OWASP University Challenges and for the European Cyber Security Challenge. The Hacking-Lab also provides free OWASP TOP 10 online security labs. Hacking-Labs’ goal is to raise awareness towards increased education and ethics in information security through a series of cyber competitions that encompass forensics, cryptography, reverse-engineering, ethical hacking and defense.

Learn more about [https://www.hacking-lab.com Hacking-Lab]

==Introduction==

Currently, there is one challenge, the OWASP TopTen with currently 8700 registered users and +3500 solutions send in and verified by the OWASP teachers! The goal is to provide an open and transparent process about the challenges, the teachers and continuously working on extending the available challenges.

==Available challenges==

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP TopTen Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP Hackademic Hands-On Training]

* Free registration for [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP WebGoat Hands-On Training]

==Licensing==
OWASP Hacking Lab is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Hacking Lab ==

OWASP Hacking Lab provides:

* [https://www.hacking-lab.com/events/registerform.html?eventid=245&uk= OWASP Top 10]
* [https://www.hacking-lab.com/events/registerform.html?eventid=302&uk= OWASP WebGoat]
* [https://www.hacking-lab.com/events/registerform.html?eventid=557&uk= OWASP Hackademic]
* University Challenges
* Fun Challenges
* [http://www.hacking-lab-ctf.com/ CTF System]

== Presentation ==

Link to presentation

== Project Leaders ==

[mailto:ivan.buetler@owasp.org Ivan Buetler]

[mailto:Mateo.Martinez@owasp.org Mateo Martinez]

== Related Projects ==

* [[OWASP_CISO_Survey]]

== Ohloh ==

*https://www.ohloh.net/p/Hacking_Lab

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

* Link to page/download

== News and Events ==
* [20 Nov 2013] News 2
* [30 Sep 2013] News 1

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_DOC.jpg|link=]]
|}

|}

=FAQs=

==Solution Grading & Evaluation Guidelines for Teachers==
*Always be polite
**Never ever be unpolite. No matter what comment or question you receive!
**You are OWASP's interface, behave mature and polite.
*Comment in positive phrasing
**E.g. if partially scored has been achieved, congratulate them
**If the solution contains a good write-up, let them know you appreciate!
**If they thank you for the event, return the favor e.g. thanks for contributing
*Teaching and mentoring
**If a previous suggestion is not understand, try to rephrase
*No abusive language is permitted
**If you receive any in a solution, don't 'hit back'
**See what is causing the frustration, see if you can help is, let Ivan or Martin know

==Rating:==
*Understanding the vulnerability is essential
**If a solution describes the vulnerability, this does scores points.

*Mitigation scores higher than hacking:
**We are training security awareness! If mitigation is asked as part of the solution, this scores higher then exploitation
*Exploiting is essential
**The exploit has to be proven, but a solution that describes the exploit detailed, this is fine too!
*Give points when possible
**If not the complete answer has been supplied, give partial points when possible.
**Only reject if:
***there is no solution (e.g. a question asked by the student)
***the solution is answering the wrong challenge
***the vulnerability / exploit / mitigation has clearly not been understood

*Rating example:
**If you have 10 points to give this is how to divide them:
**;3 Points for vulnerability description
**;3 Points for proven exploit
**;4 Points for complete mitigation description

= Acknowledgements =
==Volunteers==
OWASP Hacking-Lab is developed by a worldwide team of volunteers. The primary contributors to date have been:

* Ivan Buetler
* Martin Knobloch
* Mateo Martinez

==Volunteer Roles==
* Challenge developer
* Challenge tester
* LiveCD developer
* Teachers (solution grading)
* University Challenge Organizer

= Road Map and Getting Involved =

Involvement in the development and promotion of Hack Lab is actively encouraged!
You do not have to be a security expert in order to contribute.
==Become an OWASP challenge participant/student==
*Register to a free OWASP Hands-On Training (see tab "Available Challenges")
*Sign-Up a Hacking-Lab account
*Prepare your client infrastructure (recommended LiveCD from http://media.hacking-lab.com/)
*Setup VPN from within your LiveCD
*Read the challenge description (once registered in the first step)
*Submit your solution into the HL portal
*OWASP volunteers will grade your submission

==Become an OWASP teacher==
*Solve the challenges as participant/student first
*Make yourself familiar with the OWASP TOP 10, Hackademics and WebGoat challenges
*Ask for becoming a teacher to the project leaders

==Become an OWASP challenge developer==
*Solve the challenges as participant/student first
*Submit your challenge ideas (using the challenge concept template)
*Create your challenge

==Become an OWASP challenge tester==
*Solve the challenges as participant/student first
*Submit your feedback and ideas how to improve the challenges

=University Challenge=
== Introduction ==
The OWASP Hacking-Lab project is the framework used for the OWASP AppSec University Challenges.

This is an on-site university team versus university team competition run during the training days of an AppSec conference. See more here: [https://www.owasp.org/index.php/OWASP_University_Challenge OWASP University Challenge]

The challenges are even more dynamic and realistic now. Instead of just solving different security challenges, teams carry out a virtual online battle against each other in an attack-defense based competition, also known as CTF system. If you are interested to learn more about the CTF system, you will find here more information: [http://www.hacking-lab-ctf.com CTF System]

===Previous events:===
*[https://www.hacking-lab.com/references/AppSec_EU_2016_Rome/ AppSec EU 2016 Rome]
*[https://www.hacking-lab.com/references/AppSec_EU_2015_Amsterdam/ AppSec EU 2015 Amsterdam]
*[https://www.hacking-lab.com/references/AppSec_EU_2014_Cambridge/ AppSec EU 2014 Cambridge]
*[https://www.hacking-lab.com/references/AppSec-EU-2013-University-Challenges.pdf AppSec-EU 2013 Hamburg]
*[https://www.hacking-lab.com/references/OWASP-AppSec-Athen-2012/ AppSec-EU 2012 Athens]
*AppSec-US 2012 Austin
*AppSec-US 2011 Minneapolis

===Questions===
Please review UC faq: https://www.owasp.org/index.php/OWASP_University_Challenge#tab=FAQs

=Project About=
{{:Projects/OWASP_Hacking_Lab}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

OWASP University Challenge

2016-07-07T11:47:47Z

Ivan Buetler: /* Expenses: */

OWASP University Challenge

2016-07-07T11:46:12Z

Ivan Buetler: /* Outline: */

OWASP University Challenge

2016-07-07T11:43:50Z

Ivan Buetler: /* About Hacking-Lab */

OWASP University Challenge

2016-07-07T11:38:16Z

Ivan Buetler: /* What is the OWASP University Challenge? */

OWASP University Challenge

2016-07-07T11:35:54Z

Ivan Buetler: /* Attack-Defense System */