This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "OWASP Hackademic Challenges Project"

From OWASP
Jump to: navigation, search
(OWASP Hackademic Challenges Project)
Line 12: Line 12:
 
==Introduction==
 
==Introduction==
  
The '''OWASP Hackademic Challenges''' Project is an open source project that helps you test your knowledge on web application security. You can use it to actually attack web applications in a realistic but also controlable and safe environment.
+
The '''OWASP Hackademic Challenges''' Project helps you test your knowledge on web application security. You can use it to actually attack web applications in a realistic but also controllable and safe environment.
  
'''Download''' the current version (v.0.1.1) from [https://code.google.com/p/owasp-hackademic-challenges/ Google Code].  
+
'''Download''' the old version (v.0.1.1) from [https://code.google.com/p/owasp-hackademic-challenges/ Google Code].  
''' Development version ''' [https://github.com/Hackademic/hackademic.git Github] Latest changes implemented in the 'next' branch
+
''' the Latest Version is on'''' [https://github.com/Hackademic/hackademic/ GitHub].
 +
''' Developers checkout the ''' [https://github.com/Hackademic/hackademic/tree/next-dev Development Branch]
  
You can also challenge yourself using the live version hosted here: http://hackademic1.teilar.gr/
 
  
Live version in Greek language (includes additional challenges): http://hackademic1.teilar.gr/gr
+
{{Font color||greay| Live version in Greek language (includes additional challenges): http://hackademic1.teilar.gr/gr }}
 +
{{Font color||greay| You can also challenge yourself using the live version hosted here: http://hackademic1.teilar.gr/ }}
 +
The servers are down due to changes in the Uni's datacenter, it will be up soon.
 +
 
  
 
The '''OWASP Hackademic Challenges''' have been now also integrated into the [https://www.hacking-lab.com Hacking Lab]. You can register and play for '''FREE''' the Hackademic Challenges at the Hacking Lab by following this link: https://www.hacking-lab.com/events/registerform.html?eventid=302&uk=
 
The '''OWASP Hackademic Challenges''' have been now also integrated into the [https://www.hacking-lab.com Hacking Lab]. You can register and play for '''FREE''' the Hackademic Challenges at the Hacking Lab by following this link: https://www.hacking-lab.com/events/registerform.html?eventid=302&uk=
Line 53: Line 56:
 
Current deployments (http://hackademic1.teilar.gr/) have integrated the OWASP Hackademic Challenges with well-known CMS software (e.g. [http://www.joomla.org/ Joomla]) in order to provide a complete e-learning environment, where students can register and monitor their progress as they go through the challenges.
 
Current deployments (http://hackademic1.teilar.gr/) have integrated the OWASP Hackademic Challenges with well-known CMS software (e.g. [http://www.joomla.org/ Joomla]) in order to provide a complete e-learning environment, where students can register and monitor their progress as they go through the challenges.
  
If you need a assistance in setting up the OWASP Hackademic Challenges in your environment, please don't hesitate to contact the project team by posting your inquire on the OWASP Hackademic Challenges project [https://lists.owasp.org/mailman/listinfo/owasp-hackademic-challenges mailing list].
+
Contact Us: OWASP Hackademic Challenges project Mailing List [https://lists.owasp.org/mailman/listinfo/owasp-hackademic-challenges mailing list].
  
 
==Licensing==
 
==Licensing==
Line 77: Line 80:
 
[mailto:[email protected] Konstantinos Papapanagiotou]
 
[mailto:[email protected] Konstantinos Papapanagiotou]
 
   
 
   
[mailto:spyrosgaster@gmail.com Spyros Gasteratos]
+
[mailto:spyros.gasteratos@owasp.org Spyros Gasteratos]
  
 
[mailto:[email protected] Andreas Venieris (Core Developer) (Founder)]
 
[mailto:[email protected] Andreas Venieris (Core Developer) (Founder)]
Line 91: Line 94:
 
== Quick Download ==
 
== Quick Download ==
  
[https://code.google.com/p/owasp-hackademic-challenges/ Download]
+
[https://github.com/Hackademic/hackademic/ Download]
  
 
== Email List ==
 
== Email List ==
Line 98: Line 101:
  
 
== News and Events ==
 
== News and Events ==
* [20 Nov 2013] News 2
 
* [30 Sep 2013] News 1
 
  
  
Line 123: Line 124:
 
=FAQs=
 
=FAQs=
  
; Q1
 
: A1
 
  
; Q2
+
= Acknowledgements =
: A2
 
  
= Acknowledgements =
 
 
==Volunteers==
 
==Volunteers==
 
The Hackademic Challenges are developed by a worldwide team of volunteers. The primary contributors to date have been:
 
The Hackademic Challenges are developed by a worldwide team of volunteers. The primary contributors to date have been:
Line 138: Line 135:
  
 
* [mailto:[email protected] Anastasios Stasinopoulos]
 
* [mailto:[email protected] Anastasios Stasinopoulos]
 +
 +
* [mailto:[email protected] Spyros Gasteratos]
 +
 +
* [mailto:[email protected] Konstantinos Papapanagiotou]
 +
  
 
==Others==
 
==Others==
Line 144: Line 146:
  
 
= Road Map and Getting Involved =
 
= Road Map and Getting Involved =
As of July, the priorities are:
 
* * Building additional challenges that also cover different security domains (e.g. cryptography) or other OWASP Top 10 risks.
 
* Enrich Hackademic CMS with more features and better security
 
* ...
 
  
For a list of features we would like implemented you can see our [https://www.owasp.org/index.php/GSoC2013_Ideas#OWASP_Hackademic_Challenges_-_New_challenges_and_Improvements_to_the_existing_ones Google Summer Of Code ideas page]
+
We maintain an up to date list of open issues on the platform on our issues page on github [https://github.com/Hackademic/hackademic/issues here]
 +
 
 +
For a list of features we would like implemented you can see either the issues page or our [https://www.owasp.org/index.php/GSoC2013_Ideas#OWASP_Hackademic_Challenges_-_New_challenges_and_Improvements_to_the_existing_ones Google Summer Of Code ideas page]
  
 
Involvement in the development and promotion of the Hackademic Challenges is actively encouraged!
 
Involvement in the development and promotion of the Hackademic Challenges is actively encouraged!
 
You do not have to be a security expert in order to contribute.
 
You do not have to be a security expert in order to contribute.
 
Some of the ways you can help:
 
Some of the ways you can help:
* xxx
+
* Write Documentation
* xxx
+
* Write Unit tests
 
+
* Develop themes and plugins
 +
* Write Challenges or Articles or contribute security courses
  
  

Revision as of 12:44, 15 October 2014

OWASP Project Header.jpg

OWASP Hackademic Challenges Project

Hackademic transp logo.png

Introduction

The OWASP Hackademic Challenges Project helps you test your knowledge on web application security. You can use it to actually attack web applications in a realistic but also controllable and safe environment.

Download the old version (v.0.1.1) from Google Code. the Latest Version is on' GitHub. Developers checkout the Development Branch


Template:Font color Template:Font color The servers are down due to changes in the Uni's datacenter, it will be up soon.


The OWASP Hackademic Challenges have been now also integrated into the Hacking Lab. You can register and play for FREE the Hackademic Challenges at the Hacking Lab by following this link: https://www.hacking-lab.com/events/registerform.html?eventid=302&uk=


Description

The Hackademic Challenges implement realistic scenarios with known vulnerabilities in a safe, controllable environment. Users can attempt to discover and exploit these vulnerabilities in order to learn important concepts of information security through the attacker's perspective.

Currently, there are 10 web application security scenarios available.

You can choose to start from the one that you find most appealing,although we suggest to follow the order presented on the first page.We intend to expand the available challenges with additional scenarios that involve cryptography, and even vulnerable systems implemented in download-able virtual machines.

Target Group

Anyone can use the OWASP Hackademic Challenges to test one's knowledge and skills.

Nevertheless, the OWASP Hackademic Challenges have been mainly developed to be used in a live classroom environment. Experience has shown increased interest and engagement from students that actually get to practice application security and see how things work in a realistic environment.

Currently they are successfully used in the security courses of the following universities:

Deployment

The OWASP Hackademic Challenges can be easily deployed to any PHP-capable web server.

Current deployments (http://hackademic1.teilar.gr/) have integrated the OWASP Hackademic Challenges with well-known CMS software (e.g. Joomla) in order to provide a complete e-learning environment, where students can register and monitor their progress as they go through the challenges.

Contact Us: OWASP Hackademic Challenges project Mailing List mailing list.

Licensing

OWASP Hackademic Challenges Project is free to use. It is licensed under the Apache License V2.0


What are Hackademic Challenges?

OWASP Hackademic Challenges Project provides:

  • The Hackademic Challenges is an open source project that can be used to test and improve one's knowledge of web application security.
  • The Hackademic Challenges project implements realistic scenarios with known vulnerabilities in a safe, controllable environment. Users can attempt to discover and exploit these vulnerabilities in order to learn important concepts of information security through the attacker's perspective.
  • They have been especially designed for use in a classroom environment where they have been proved a valuable educational tool. Using hackademic challenges students have the chance to experience application security in a realistic environment, something that triggers their interest and provokes a lot of interesting discussions.
  • The Hackademic Challenges are currently used in several Universities and have received very positive feedback from both professors and students.


Presentation

Project Leaders

Konstantinos Papapanagiotou

Spyros Gasteratos

Andreas Venieris (Core Developer) (Founder)

Related Projects

Ohloh

Quick Download

Download

Email List

News and Events

In Print

Classifications

Midlevel projects.png Owasp-builders-small.png
Owasp-defenders-small.png
Cc-button-y-sa-small.png
Project Type Files CODE.jpg

Volunteers

The Hackademic Challenges are developed by a worldwide team of volunteers. The primary contributors to date have been:


Others

  • xxx
  • xxx

We maintain an up to date list of open issues on the platform on our issues page on github here

For a list of features we would like implemented you can see either the issues page or our Google Summer Of Code ideas page

Involvement in the development and promotion of the Hackademic Challenges is actively encouraged! You do not have to be a security expert in order to contribute. Some of the ways you can help:

  • Write Documentation
  • Write Unit tests
  • Develop themes and plugins
  • Write Challenges or Articles or contribute security courses


PROJECT INFO
What does this OWASP project offer you?
RELEASE(S) INFO
What releases are available for this project?
what is this project?
Name: OWASP Hackademic Challenges Project (home page)
Purpose:
  • The Hackademic Challenges is an open source project that can be used to test and improve one's knowledge of web application security.
  • The Hackademic Challenges project implements realistic scenarios with known vulnerabilities in a safe, controllable environment. Users can attempt to discover and exploit these vulnerabilities in order to learn important concepts of information security through the attacker's perspective.
  • They have been especially designed for use in a classroom environment where they have been proved a valuable educational tool. Using hackademic challenges students have the chance to experience application security in a realistic environment, something that triggers their interest and provokes a lot of interesting discussions.
  • The Hackademic Challenges are currently used in several Universities and have received very positive feedback from both professors and students.
License: TBC
who is working on this project?
Project Leader(s):
Project Contributor(s):
how can you learn more?
Project Pamphlet: Not Yet Created
Project Presentation:
Mailing list: Mailing List Archives
Project Roadmap: View
Main links:
Key Contacts
current release
OWASP Hackademic Challenges(EN) v0.1.1 - February 2011 - (download)
Release description:
  • The Hackademic Challenges is an open source project that helps you test your knowledge on web application security. You can use it to actually attack web applications in a realistic but also controlable and safe environment.
Rating: Yellow button.JPG Not Reviewed - Assessment Details
last reviewed release
Not Yet Reviewed


other releases