OWASP Snakes And Ladders

OWASP Snakes And Ladders - An OWASP lab project

About OWASP Snakes And Ladders

Web Applications Edition

OWASP Snakes and Ladders - Web Applications was the first edition created. The objective is to raise awareness of the security controls that every web application should have, but link that with the much more widely known Top Ten Risks. The virtuous behaviours (ladders) are secure coding practices (from OWASP Proactive Controls project 2014-2018) and the vices (snakes) are application security risks (from OWASP Top Ten Project 2013-2017).

• OWASP Proactive Controls project

• OWASP Top Ten Project

Current Releases

Language Code: Name / Title / Current Version	Example Square
BR: Português BrasileiroSerpentes e Escadas Aplicativos da Web
DE: DeutschSchlangen und Leitern Web Anwendungen
EN: EnglishSnakes and Ladders Web Applications v1.20
ES: EspañolSerpientes y Escaleras Aplicaciones Web
FR: FrançaisSerpents et Échelles Application Web
JA: 日本語蛇とはしごウェブアプリケーション
TR: TürkçeYılanlar ve Merdivenler Web Uygulamaları
ZH: 中文蛇梯棋 WEB应用程序
Note that some languages choose not to change the EN text for risk and control names.
Source: Adobe Illustrator file

• Adobe Illustrator file

Tabletop Simulator

A digital version (of the English release) is available on Steam Workshop. It can be played with 2-6 players online. While the game itself is a free community download, all players must have Tabletop Simulator in their Steam library.

• available on Steam Workshop

• the game itself is a free community download

• Tabletop Simulator

Colour Scheme ‘Classic’

This edition uses simple primary colours, like many versions that can be seen in pictures of Snakes and Ladders games. The colours used in ‘Classic’ are: The start square (1) is yellow and the final square (100) is red.

Project Resources

Project Leaders

risks:

Katy Anton

Project Leader

Project Information

Lab Project

Classification

Other

Language

HTML

Contributors

GitHub Stars

Downloads

Corporate Supporters

Become a Corporate Supporter Meet our Corporate Supporters Supporter Job Postings

OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.

OWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.