Add OopsSec Store to OWASP Top 10 & Web-Based Attacks resources

[kOaDT]

What

Adds one @opensource@ resource to the OWASP Top 10 and Web-Based Attacks topic in the Cyber Security roadmap.

• OopsSec Store - https://vwad.owasp.org/app/oopssec-store/

Why

The topic currently links the OWASP Top Ten spec and a video, but no runnable, hands-on lab where learners can actually exploit these vulnerabilities. OopsSec Store fills that gap: an MIT-licensed, intentionally vulnerable e-commerce app (XSS, CSRF, IDOR, SQLi, JWT, path traversal, …) that runs in under a minute via npx create-oss-store or Docker, with a guided 35-flag CTF roadmap and a walkthrough for every challenge.

It complements the existing OWASP entry the same way VulnHub complements the CTF section -> theory plus a safe, legal environment to practice it.

Disclosure

Full transparency: I'm the author of this project. I'm submitting it because it fills a missing "practice environment" slot for this topic. I'm linking the OWASP VWAD directory entry (not my own repo). Happy to adjust the wording/placement or drop it if you feel it doesn't fit.

Guidelines checklist

• Resource is in English
• Topic stays well under the 8-link limit (3 total)
• Correct type tag (@opensource@)
• Personally evaluated (it's the project I maintain)