Web Hacking 101

A hands-on security workshop created by Etive Mòr for Umbraco Codegarden 2025.

The date was June 17th, 2025. The sun was shining on Odense, Denmark. A crew of friendly pirates were docked at a nearby port, drinking grog and preparing for a long week of plundering, looting, and downloading music from the Internet onto floppy disks.

This article was originally published as a guest post on the official Umbraco blog - read the full article here.


We’re incredibly thankful to Umbraco HQ for the opportunity to speak at Codegarden this year and to the community for attending and supporting us along the way.

Below are some very kind testimonials from some folks who attended the workshop:

This is one of the best-prepared training sessions I’ve ever attended. The exercises were very well explained - easy to understand and follow for the attendees. I especially appreciated the ‘Damn Vulnerable Umbraco Application,’ which showed how even smaller security issues can have real impact, and how important it is to fix them. It also highlights a key strength of open source: transparency makes us stronger.

Lasse Fredslund, Product Manager, Umbraco HQ

Having been in the industry for a long time, Steve’s workshop was a real eye-opener! I’m aware of security risks when creating websites, and Steve did a fantastic job explaining the vulnerabilities and how to avoid them in the first place. We were shown how to use some powerful beginner-friendly tools to hack into a real Umbraco website - all while keeping things fun and engaging. 5* would definitely recommend!

Richard Ockerby, Founder and Tech Lead at Arjo.dev, Umbraco MVP

The workshop slides, exercises, and source code are available for free on the course website and Git repository, but note that the demo site and CTF are now offline.

If you are interested in running this workshop at your meetup or event, get in touch with us.