- Created standalone labs of existing pygoat labs
- Custom Management Command:
Added thepopulate_challengescommand that reads challenge data fromchallenge/challenge.jsonand populates theChallengetable usingget_or_createto prevent duplicate entries. The command handles missing files and JSON decode errors gracefully. - Added
MIT Licenseto the project.
- Challenge Model:
- Updated the
save()method to raise aValidationErrorifstart_portis greater thanend_port. - Enhanced flag handling by hashing the
flagfield using SHA-256 (prefixed with "hashed_") if it hasn't been hashed already.
- Updated the
- New themes
- Bug fixing
PyGoat Release Version 2.0.0
-
Whole new section for OWASP TOP 10 2021
i. New lab on template injection
ii. New 3 labs on cryptographic failure
iii. 1 more lab on broken access control
iv. 1 lab on Insecure Design
v. 1 more lab on security misconfiguration
vi. 1 new lab on using components with known vulnerability
vii. 2 new labs on Identification and Authentication failure
viii. 1 lab on software and data integrity failure and XXS
ix. Some labs on Insufficient logging
x. 2 new labs on SSRF -
Section for Code discussion for most of the sections of OWASP 2021
-
Coding playground for SSRF
i. Authentication failure
ii. Insufficient logging -
Added new section for SANS 25 and MITRE 25
-
Added new lab in SANS and MITRE 25 section
i. Path traversal
ii. Command injection
iii. Code injection
iv. CSRF -
New Dark theme and improved UI
-
Better Docker file for smooth install
-
Brand new Logo
PyGoat Pre-Release Version 2.0
- Whole new section for OWASP TOP 10 2021
i. New lab on template injection
ii. New 3 labs on cryptographic failure
iii. 1 more lab on broken access control
iv.