<commit_before>---
layout         : blocks/working-session
title          : Hackathon - Beyond OWASP Top Ten
type           : workshop
owasp-project  : no
track          : Education
technology     : Docker, AngularJS, Python
related-to     : Teaching Attacker perspective to Developers, Juice Shop, CTFs, Hackathon Daily Sessions
status         : draft
when-day       : Tue,Wed
when-time      : Eve
location       : Villa-3
organizers     : <NAME>, <NAME>
participants   : 
---

> :triangular_flag_on_post: TODO: Add fancy sales pitch for
> Capture-the-flag (CTF)

## Why

In this hackathon, Participants can experience a large set of security challenges ranging from web security to DevSecOps. The session is run on the [avatao](https://avatao.com) platform, that is an online tool to offer hands-on ITsec challenges. The goal is primarily to have fun, but also to gather feedback from the participants on the platform and ideas for new challenges for AppSec professionals.

## What

Planned topics for the hackathon: 
- web security, 
- API security,
- testing (BDD),
- security misconfigurations,
- Docker security,
- secure coding in C, 
- secure coding in Java, 
- security tools tutorials (Wireshark, Unicorn Engine),
- crypto and protocol security,
- hacker stuff (pwn, RE) on demand


## Outcomes

- having fun 
- learn new vulnerabilities and past epic failures ([Yahoo Mail stored XSS](https://klikki.fi/adv/yahoo2.html))
- collect new ideas for security challenges (secure coding in X, GDPR)
- Suggested Outcome: A list of important security topics for developers. A list of challenge ideas by topic. 

## Who

The target audience for this Working Session is:

- Developers (anyone interested in web and low-level languages)
- Security professionals
- CTF participants (and those who would like to become one)
- CISOs

--- 

## Working materials

...
<commit_msg>Extend and modify our Hackathon suggestion<commit_after>---
layout         : blocks/working-session
title          : Hackathon - Beyond OWASP Top Ten
type           : workshop
owasp-project  : no
track          : Education
technology     : Docker, AngularJS, Python
related-to     : Teaching Attacker perspective to Developers, Juice Shop, CTFs, Hackathon Daily Sessions
status         : draft
when-day       : Tue,Wed
when-time      : Eve
location       : Villa-3
organizers     : <NAME>, <NAME>
participants   : 
---

> :triangular_flag_on_post: TODO: Add fancy sales pitch for
> Capture-the-flag (CTF)

## Why

In this hackathon, Participants can experience a large set of security challenges ranging from web security to DevSecOps. The session is run on the [avatao](https://avatao.com) platform, that is an online tool to offer a wide variety of hands-on ITsec challenges. We demonstrate how deep the rabbit hole can be of challenges in terms of architecture, programming languages or design. Avatao contains more than 400 real challenges to achieve this. The session can be useful for anyone who would like to get hands-on experience with cutting edge technologies (e.g., Unicorn Engine, Kaitai Struct) that shapes our security today or solve more traditional challenges in web security or Java.

The primary goal however is to have fun and gather feedback from the participants on the platform and ideas for new challenges for AppSec professionals.



## What

Planned topics for the hackathon: 
- web security, 
- API security,
- testing (BDD),
- security misconfigurations,
- Docker security,
- secure coding in C, 
- secure coding in Java, 
- security tools tutorials (Wireshark, Unicorn Engine),
- crypto and protocol security,
- hacker stuff (pwn, RE) on demand


## Outcomes

- having fun 
- learn new vulnerabilities and past epic failures ([Yahoo Mail stored XSS](https://klikki.fi/adv/yahoo2.html))
- hands-on experience with cutting edge ITSec technologies (e.g., Kaitai Struct, Unicorn Engine)
- collect new ideas for security challenges (secure coding in X, GDPR)


## Who

The target audience for this Working Session is:

- Developers (anyone interested in web and low-level languages)
- Security professionals
- CTF participants (and those who would like to become one)
- CISOs


## Remote Participants

All the challenges will be available online so anyone can join us even remotely.

--- 

## Working materials

...

{'fraction_non_alphanumeric': 0.06977283263792304, 'fraction_numerical': 0.0016226240148354196, 'mean_word_length': 3.532563025210084, 'pattern_counts': {'":': 0, '<': 7, '<?xml version=': 0, '>': 11, 'https://': 4, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 4, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '13138', 'n_tokens_mistral': 1185, 'n_tokens_neox': 1122, 'n_words': 544}