https://forum.defcon.org/ In this talk, we will be introducing AWSGoat, a vulnerable by design infrastructure on AWS featuring the latest released OWASP Top 10 web application security risks (2021) and other misconfiguration based on services such as IAM, S3, API Gateway, Lambda, EC2, and ECS. AWSGoat mimics real-world infrastructure but with added vulnerabilities. en Wed, 13 May 2026 09:57:47 GMT vBulletin 60 https://forum.defcon.org/images/misc/rss.png https://forum.defcon.org/