Snake cards Ladder boosts Security board

OWASP Security Board

Choose a challenge set for your Snakes and Ladders security app.

W

OWASP Top 10

Web application security vulnerabilities.

Open board ->
AI

OWASP Top 10 for LLM

Large language model security vulnerabilities.

Open board ->
M

OWASP Mobile Top 10

Mobile application security vulnerabilities.

Open board ->
Game Guide

How to Play

Welcome to the OWASP Security Snakes and Ladders Game. Play like normal Snakes and Ladders, but use OWASP knowledge to climb ladders and escape snakes.

Players

2-6 players can play.

Goal

Be the first player to reach Square 100, the finish square.

Game Rules

  1. Choose your counter: Each player chooses a different coloured counter and places it on START.
  2. Decide who goes first: Each player rolls the dice once. The player with the highest number starts.
  3. Roll and move: On your turn, roll the six-sided dice and move your counter forward by the number shown.
  4. Normal square: If you land on a normal square, nothing happens. Your turn ends and the next player plays.

Land on a Ladder: Security Control Challenge

When you land at the bottom of a ladder, answer or explain the security question/control shown for that square.

Correct answer: climb the ladder.
Wrong answer or do not know: stay at the bottom.

Example: A04 - Insecure Design means an application is designed without sufficient security controls.

Land on a Snake: Security Risk Challenge

When you land on the mouth or head of a snake, explain or answer a question about the security risk.

Correct answer: escape the snake and stay there.
Wrong answer or do not know: slide down to the tail.

Example: A03 - Injection can let an attacker provide malicious input that is interpreted as a command or query.

Security Squares

The board contains security codes such as A4, A8, A10, C3, and C7. Use this website to view the matching vulnerability and understand its meaning.

A4 -> A04 - Insecure Design
A10 -> A10 - Server-Side Request Forgery (SSRF)
C3 -> C3 - Insecure Authentication / Authorization

How to Win

Keep rolling, answering security challenges, climbing ladders, and avoiding snakes. The first player to reach Square 100 wins.

Know the control: climb the ladder.
Know the risk: escape the snake.
Reach 100: win the game.