The document introduces Railsgoat, a purposefully vulnerable Rails application created by Ken Johnson for security training. It aligns with the OWASP Top 10 2010 vulnerabilities and is meant to be hacked and tweaked. Instructions are provided on how to get started, install it, and contribute code to the open source project hosted on GitHub. Future plans include updating it to work with Rails 4 and align with the OWASP Top 2013 vulnerabilities.

1. RAILSGOAT
KEN JOHNSON
OWASP ATLANTA- JUNE 20, 2013

2. WHO AM I?
 Really, a question we all face. amiright?
 @cktricky on “the twitters”
 Ginger
 I have many leather-bound books

3. RAILSGOAT INTRO
 Purposefully Vulnerable Rails Application
(necessary to specify “purposefully”)
 Aligns with the OWASP Top 10 2010
 Built for realism

4. WHY YOU SHOULD
USE IT?
Q: Pretty, Nice, and Made of spice?
A: Absolutely

5. WHY YOU SHOULD
USE IT?
 Great learning tool
 Tweak-able (not tweaker, that’s a different
group)
 Built to scale
 Come on people, it’s Ruby!!!

6. OKAY, SO HOW DO I
GET STARTED?
 Visit the homepage
http://railsgoat.cktricky.com
 Follow installation instructions
 Hack all the things

7. SUPPORT WINDOWS?
I’m not even sure Windows supports Windows

8. WHERE IS THE CODE
HOSTED?
GitHub, because I <3 GitHub

9. ROADMAP
No, we aren’t “winging it”, I swear
The Roadmap is in the form of GitHub “Issues”.
Important additions
• Rails 4
• OWASP Top 10, 2013
• More features, more pwnage

10. CONTRIBUTIONS
 You earn one million kencoins (like bitcoins except
worthless. Actually…..exactly like bitcoins).
 Statues will be built in your honor
 Good luck with the paparazzi
 fork/commit/push/pull-request

11. CAN I SEE IT?
Only if you have 1 billion kencoins!!!

12. THANKS
You are awesome, slap your hands together repeatedly for
yourself.
 Twitter - @cktricky
 Blogs –
 carnal0wnage.attackresearch.com
 blog.nvisium.com
 cktricky.com (In progress. Very, very slow progress)