1. OWASP Bricks

2. OWASP Bricks Web application security learning platform. Built with PHP and MySQL. Open source and free. ‘Break the Bricks’ and learn.

3. Why Bricks? Simple, clean and friendly. Almost all levels can be solved using Mantra. Code can be reused to build CTFs. Perfect for lab demos.

4. OWASP Mantra Browser for penetration testing. Cross platform. Great UI and ready to use. Perfect tool for manual web app security analysis. www.getmantra.com

5. OWASP ZAP Proxy for web application analysis. Cross platform. The best tool for manual/semi automated and automated web application security analysis. owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project

6. Login pages Comes with security issues Can be breached using Mantra Login pages

7. File upload pages Comes with security issues Can be breached using Mantra File upload pages

8. Content pages Comes with security issues Can be breached using Mantra Content pages

9. Roadmap Maximum variations of common security issues Help people to learn the need of secure codding practices and SSDLC A test bed for analysing the performance of web application security scanners. Help people learn the manual method of testing the applications Demonstrate the possibilities of various security tools and techniques Become a platform to teach web application security in a class room/lab environment.

10. Be in touch https://www.owasp.org/index.php/OWASP_Bricks http://owaspbricks.blogspot.com/