Hi, I am Jeroen Willemsen. As a typical security jack-of-all-trades I love to work at a lot of things. But as a husband, parent, and full-time employee, I only have limited time ;-). I love to share knowledge through talks, blogs, projects at github, and trainings. Want to reach out? Connect to me through Twitter, LinkedIn, (OWASP) Slack, or Keybase.
Previous talks: check or projects at
.
My favorite project is OWASP WrongSecrets as it is the first Secrets Management-focused vulnerable/p0wnable app! It can be used as a stand-alone game, as part of security trainings, awareness demos, as a test environment for secret detection tools, and bad practice detection tooling. It even has a supporting CTF platform to play the game in a larger group. Here are some links:
- OWASP WrongSecrets main repo
- OWASP WrongSecrets Binaries
- OWASP WrongSecrets CTF Party repo
- OWASP WrongSecrets Project Page
- WrongSecrets Heroku hosted Demo
As a father, I wanted to create some fun games for my children, here are some AI generated projects:
- Albert Heijn self-scan simulator (Dutch)
- 2d scrolling platform game
- 3d underwater game
- multiplier
- speller
- parsergame
- topotest
- generatedracer
- practicer
Though I just did a few commits, the real heroes are the maintainers!
| 🎁 Projects | 📚 Stars |
| WebGoat WebGoat is a deliberately insecure application |
|
| Juice Shop OWASP Juice Shop: Probably the most modern and sophisticated insecure web application |
|
| OWASP Mobile Security Testing Guide The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering. |
|
| OWASP Mobile Application Security Verification Standard The Mobile Application Security Verification Standard (MASVS) is a standard for mobile app security. |
|
| OWASP Cheat Sheet Series The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics. |
|