Virtual Security Training Lab - Setup Instructions

Below are the setup instructions to configure a virtual security training lab that runs within an isolated virtual machine. Using this lab you can perform hands on security testing that leverage a variety of prominent application security flaws including those mentioned in the OWASP Top 10.

The lab requires the following software (all free):

• Virtual Environment
• Virtual Box

• Web Proxy

• OWASP Zap

• Security Testing Lab

• OWASP Broken Web Apps (BWA)

• OWASP BWA includes the target software OWASP WebGoat
• Java SE - May already be installed on your device
. No specific version needed.

Virtual Security Lab Setup - OWASP Broken Web Apps, Webgoat, & ZAP from Michael Coates

-Michael Coates - @_mwc