https://systemoverlord.com/tags/pwnableweb.htmlRecent content in PwnableWeb on System OverlordHugoen-usdavid@systemoverlord.com (David Tomaschik)david@systemoverlord.com (David Tomaschik)Fri, 09 May 2014 00:11:58 +0000https://systemoverlord.com/2014/05/09/announcement-pwnableweb-released/Fri, 09 May 2014 00:11:58 +0000david@systemoverlord.com (David Tomaschik)https://systemoverlord.com/2014/05/09/announcement-pwnableweb-released/<p>In addition to my primary interest in the technical aspects of information security, I&rsquo;m also a big fan of wargames &amp; CTFs as educational tools, so a while back, I decided I wanted to build a web-based wargame and CTF scoreboard system. Today I am releasing the results of that, dubbed <strong>PwnableWeb</strong>, under the Apache 2.0 License. It includes web-based wargame-style challenges and an accompanying scoreboard.</p> <p>###The Framework Each vulnerable site is built on top of a small framework that provides common functionality, and also provides a framework for building a client for interactive exploitation. (It provides a target to exploit XSS and XSRF against.)</p>