OWASP Security Shepherd V1.2 released - computer based training application for web application security vulnerabilities

Security Shepherd is a computer based training application for web application security vulnerabilities. This project strives to hurde the lost sheep of the technological world back to the safe and sound ways of secure practises. Security Shepherd can be deployed as a CTF (Capture the Flag) game or as an open floor educational server.

Overview
Easy configuration to suit every use
Security Shepherd has been designed and implemented with the aim of fostering and improving security awareness among a varied skill-set demographic. This project enables users to learn or to improve upon existing manual penetration testing skills. This is accomplished through lesson and challenge techniques. A lesson provides a user with a lot of help in completing that module, where a challenge puts what the user learned in the lesson to use. Utilizing the OWASP top ten as a challenge test bed, common security vulnerabilities can be explored and their impact on a system understood. The bi-product of this challenge game is the acquired skill to harden a players own environment from OWASP top ten security risks The modules have been crafted to provide not only a challenge for a security novice, but security professionals as well.

Security Shepherds vulnerabilities are not simulated, and are instead delievered through hardened real security vulnerabilities that can not be abused to compromise the application or it's environment. Many of these levels include insufficient protections to these vulnerabilities, such as black list filteres and poor security configuration. Security Shepherd includes everything you need to complete all of it's levels including the OWASP Zed Attack Proxy Project and portable browsers already configured for proxy use.

Download : -
SecurityShepherd v1.20-x64.rar (254.7 MB)
Find Other Version |
Visit Website -
:https://www.owasp.org/index.php/OWASP_Security_Shepherd

Security Shepherd 1.2:

The standard release is a single download, unrar, and click-to-run release. This service is currently only available for Windows operating systems

   * Double-click on the startServers.bat - Two Tomcat and two MySQL command windows will start
   * Browse to https://localhost:8080/
   * Default user is admin/password (You'll have to change the password upon login)

Security Shepherd 1.2 Manual:

The manual release is a single download, unrar, and follow the steps release.

   * Deploy the core.war and exposed.war on your application server(s)
   * Run the core.sql and exposed.sql scripts in your database servers(s) as root users
   * Point your browser at the core application (eg: https://localhost:8080/core)
   * Default user is admin/password (You'll have to change the password upon login)
   * Through the admin configuration tools, set the URL's for the application servers and sign on information for your databases