Web Application Security Quiz

[Timo H]

Hello all,

it has been a bit silent here on the PHP Security Technical Group, so I thought to share a link you might find interesting.

I did set-up a small online quiz about web application security. Currently it has 15 questions ranging from simple, to more infrequent quirks and web application related principles (a few of the questions are directly PHP related).

My main point with the quiz was to raise awareness about these principles, quirks and problems (I don't think it is a "quiz" per-se, but more like an "educational tool").

http://timoh6.github.io/WebAppSecQuiz/

Any feedback much appreciated!

Timo

[Chris Cornutt]

Pretty cool..I wish it provided more feedback on the correct/incorrect ones though - just the numbers if good but knowing the ones missed and a reminder of their text might be nice.

thanks for the work on this! off to a good start :)

-chris

Timo

--
You received this message because you are subscribed to the Google Groups "PHP Security Technical Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to sectg+un...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.
 
 

--
Senior Editor
PHPDeveloper.org
ccor...@phpdeveloper.org

@enygma

[Timo H]

I was thinking to write a blog post explaining the reasoning behind the answers. Not yet done thought. @ircmaxell also used that quiz on his Code Review for Security workshop, I need to ask if he had put his explanations about the correct answers on a "paper", so I could borrow that ;)

As a spoiler, I answered some of those question on the (now hidden, I think) Reddit netsec: http://www.reddit.com/r/netsec/comments/1g15jl/web_application_security_quiz_15_questions_about/

Thanks for the feedback!

Timo

[Timo H]

I just added a page with answers and brief commentary:
http://timoh6.github.io/WebAppSecQuiz/answers.html

Timo

maanantai, 10. kesäkuuta 2013 14.30.58 UTC+3 Chris Cornutt kirjoitti:

[Pádraic Brady]

Hey!

Tried it out yesterday ;). It's a great idea if it can be rolled out large scale (or at least the question bank data). What are your intentions for its future development? 

Paddy

Pádraic Brady

http://blog.astrumfutura.com

[Timo]

Hi,

and thanks for the feedback!

I'm open to all suggestions about the future development. For now, I see there is a room for more questions. But another matter that was suggested, was to separate the questions based on the "difficulty level". For now I see it is better to keep it as a single quiz (there is only 15 questions), but anything that can make the quiz better (in a sense it educates people), I'm open to hear. And of course, if you have some questions to be added on your mind, feel free to inform me :)

Timo

2013/6/12 Pádraic Brady <padrai...@gmail.com>