Agents & Exploits: Hacking OWASP VWAD

Join us for a hands-on workshop where you'll build an AI-powered security agent from scratch! 🛠️ Explore the core principles of agentic penetration testing using intentionally vulnerable applications from the OWASP Vulnerable Web Application Directory (VWAD).

🌟 What to Expect:

• Equip your agent with practical capabilities including shell access, browser access, and orchestration.
• Discover, exploit, and document vulnerabilities in listed OWASP applications.
• Discuss the architecture of effective security agents, tool integration, memory, and safe execution practices.

🔄 Iterative Evaluation Workflow:

• Analyze vulnerabilities your agent missed and compare results against known findings.
• Refine prompts, tool selection, workflows, and evaluation criteria for better performance.
• Learn how modern AI security agents can continuously improve through systematic testing and feedback!

🛡️ By the end of the workshop, you will have built a functional AI security agent and will understand the fundamentals of agent tooling and orchestration. You’ll leave with practical techniques for evaluating and enhancing AI-assisted security testing applications.