Vulnerable XXE VM now part of Vicnum

[Mordecai Kraushar]

All;

The OWASP Vicnum Project https://www.owasp.org/index.php/Category:OWASP_Vicnum_Project  has been updated to include a vulnerable XXE VM at http://xxe.sourceforge.net/

This VM was used in recent CTF events including the Breaking Bad challenge event at APPSEC in NY in late 2013.  

As will other vulnerable or broken apps the basic goal of  the project  is to:

• Test web application scanners
  
• Test manual attack techniques
  
• Test source code analysis tools
  
• Look at the code that allows the vulnerabilities
  
• Test web application firewalls
• Have a little fun.

Thanks much to Nicole Becher for all of this.

Mordecai Kraushar