r3_tutorials - richardrowe/railsgoat-tutorials GitHub Wiki
A2 - Broken Authentication and Session Management
A4 - Insecure Direct Object Reference
A5 - Security Misconfiguration
A7 - Missing Function Level Access Control
A8 - Cross Site Request Forgery
A9 - Using Components with Known Vulnerabilities