Remediate The Flag - Practical AppSec Training Platform

Explore an innovative approach to application security training through this conference talk from OWASP AppSec EU 2018. Discover Remediate The Flag (RTF), an open-source platform designed to provide hands-on, practical exercises for developers to improve their secure coding skills. Learn how RTF addresses common challenges in appsec training by offering a fully interactive environment where candidates find and fix vulnerabilities in real code. Gain insights into the platform's features, including real-time feedback, automated scoring, and customizable exercises tailored to specific organizational needs. Witness a live demo showcasing the complete workflow, from exercise selection to final assessment. Understand how RTF enables time-boxed tournaments, leaderboards, and comprehensive statistics to measure progress and competency. Explore the platform's architecture, installation process, and SDK for creating new exercises. Delve into specific examples such as Reflect XSS and unit testing implementation. Enhance your understanding of practical application security training methodologies and their potential impact on developer skills and organizational security posture.

Intro
Remediate The Flag
Live Demo
Architecture
Installation
Configuration
Creating a new exercise
Adding dependencies
RTF Agent
Reflect XSS
Unit Tests
Conclusion
Questions