Building (and Breaking) a Vulnerable Web App in Go + Vue.js

As developers, we often learn best by doing, and in cybersecurity, that means not just building secure systems, but also understanding how they break.

During the last months, I was on charge of explaining some of the OWASP vulnerabilities to my team, and for that I created a vulnerable web application using Go (backend) and Vue.js (frontend), designed to demonstrate some of the most common and dangerous web vulnerabilities.

• The project is available here:
  
  
  
  
  
  

  
  
  
  Final Comments
  

  
  
  

  Security is not a feature you apply from the beginning.

  
  
  

  If you can break your own system, you’re already one step closer to building something resilient.

  
  
  

  And if you haven’t tried breaking it yet… someone else eventually will.

  Vollständiges Original-Advisory

  Ausführliche Details, Exploit-Analyse & Hersteller-Stellungnahme auf dev.to.

  ↗ Original-Artikel auf dev.to lesen