The OWASP Top Ten Workshop

Workshop based on the OWASP Top Ten security vulnerabilities

Requirements

• Node LTS
• docker
• docker-compose
• Postman for testing requests

Setup

• npm ci
• npm run db:up
• npm run db:migrate

Slides

Slides contain instructions for the workshop. You can read them at https://nearform.github.io/owasp-top-ten-workshop, or:

npm start will open the slides in the browser

Running an exercise

cd src/a01-access-control
npm start

Verifying an exercise solution

This will run automated tests that fail until the issue in the exercise has been solved

(Some steps of the workshop might not have automated tests)

cd src/a01-access-control
npm run verify

Run exercise verification tests on a single project

• npm run verify -w src/a01-access-control