“Remediate the Flag: Practical AppSec Training Platform” — Andrea Scaduto

Sherif Mansour
OWASP London
Published in
1 min readAug 5, 2019

https://youtu.be/mQWjrxPx8_4

Lightining Talk — “Remediate the Flag: Practical AppSec Training Platform” — Andrea Scaduto (PDF)

This lightening talk is about RTF, an open source platform that hosts appsec exercises for developers. Candidates manually remediate the code of a vulnerable application running in a disposable development environment accessed using a web browser. The platform provides automated results, a point system with trophies, and the ability to create time-boxed tournaments. The talk will include a live demo and introduce what’s coming next.

Andrea Scaduto
Andrea is a Senior Penetration Tester and Software Engineer with a MSc in Computer Engineering and several IT Security certifications. He enjoys breaking, building and securing web and mobile applications, and he has an extensive knowledge of secure coding techniques and a focus on reducing the cost of fixing vulnerabilities at scale.

--

--

Sherif Mansour
OWASP London

Father | Ex-OWASP Chairman | Ex-OpenSSF Governing Board member | Cybersecurity Executive