Show HN: WattzGOAT – an intentionally vulnerable web app for security training
Show HN: WattzGOAT – an intentionally vulnerable web app for security training wattzgoat / wattzgoat-web Public Notifications You must be signed in to change notification settings Fork 0 Star 0 Branches Tags Open more actions menu Latest commit History 35 Commits 35 Commits Folders and files Name Name Last commit message Last commit date .github/ workflows .github/ workflows app app build build docs docs scripts scripts tests tests .dockerignore .dockerignore .gitattributes .gitattributes .gitignore .gitignore Dockerfile Dockerfile LICENSE LICENSE NOTICE NOTICE README.md README.md entrypoint.sh entrypoint.sh requirements.txt requirements.txt run.py run.py Repository files navigation WattzGOAT WattzGOAT is an intentionally vulnerable web application built to be hacked. It is a made-up smart meter company with a customer portal, and it's a lab, not a real product.
This ProductUpdate is relevant to the technology intelligence record because it involves GitHub, Docker. The source article should remain the factual reference for follow-up coverage.
- wattzgoat / wattzgoat-web Public Notifications You must be signed in to change notification settings Fork 0 Star 0 Branches Tags Open more actions menu Latest commit History 35 Commits 35 Commits Folders and files Name Name Last commit message Last commit date .github/ workflows .github/ workflows app app build build docs docs scripts scripts tests tests .dockerignore .dockerignore .gitattributes .gitattributes .gitignore .gitignore Dockerfile Dockerfile LICENSE LICENSE NOTICE NOTICE README.md README.md entrypoint.sh entrypoint.sh requirements.txt requirements.txt run.py run.py Repository files navigation WattzGOAT WattzGOAT is an intentionally vulnerable web application built to be hacked.
- It is a made-up smart meter company with a customer portal, and it's a lab, not a real product.
- Customers can check their meter, top up their balance, report solar power, look at bills and contact support.
- Admins can manage meters and look after support tickets.
- The site is vulnerable on purpose, so you can practise finding real security weaknesses in a safe place.
- Key features A full customer portal (signup, meter dashboard, recharge, solar export, bills, support tickets) plus an admin side, so there's a realistic amount of surface to explore, not just a single vulnerable form.