Show HN: WattzGOAT – an intentionally vulnerable web app for security training

Category: security

Tags: security, web-app, ctf, training, vulnerable

Score: 6.5/10 (Innovation: 6, Technical: 6, Documentation: 8, Utility: 6)

WattzGOAT is an intentionally vulnerable web app simulating a smart meter company, designed for security training with 48 hidden weaknesses and CTF-style progress tracking. It includes a simulated AI assistant with its own vulnerabilities, guided mode, and instructor dashboard, making it a comprehensive lab for practicing OWASP Top 10 issues. The project stands out by showing vulnerable and fixed code side-by-side in multiple languages once flags are found.

Target audience: Security enthusiasts, students, and instructors

Repository: https://github.com/wattzgoat/wattzgoat-web · Python · MIT · 2 stars

View on Hacker News