Welcome to The Art of Web.
This dojo is about breaking web apps and building real web security skills along the way. We put it together to fill the web-shaped gap in pwn.college, and we'd love to see it grow into an official web belt one day.
Each module starts with the fundamentals and ramps up fast. You'll find plenty of hints to nudge you forward without giving the answer away.
Whether this is your first time touching web security or you've been at it for years, there's something here for you.
The project is open source and contributions are very welcome. The code lives on Github.
Got questions, found an unintended solution, want more hints, or craving harder challenges? Ping Gus, RenegadePenguin, or Fluffy on Discord.