As you might now, we recently released OWASP® Cornucopia 2.0 with two new editions, but did you know that you can use OWASP® Cornucopia to create your own card game?

Cornucopia is the Latin word for abundance and we are not satisfied with only using 2 card games, no, we use all kind of games as long as they are fun and can help increase application security awareness and posture, but why stop there?
Why not create your software architecture game, privacy game, coding game or design game like "cards against architecture", "OWASP Cornucopia - Privacy Edition", "cards against Java" or whatever you like.
OWASP® Cornucopia comes with a card generator tool that can take a Indesign markup language document and a yaml document and turn it into a card deck and you are free to use our templates to get started. Create your design using Scribus or Indesign and add the text to your yaml file. This way, you can use our tools to change the text with a simple text editor and translate your card game into multiple languages, versions and editions. Yes, we have support for managing this too.

This is how.

1. Clone our repository
2. Install pyenv or pyenv-win
3. Then...

cd cornucopia
pyenv install 3.10 # If you don't have python ver >= 3.10 already installed.
pip install -r requirements.txt
pipenv install

Create a yaml document with your text that looks like this: source/against-security-1.00-en.yaml

Create your Indesign markup language document using Adobe Indesign or Scribus.
It should look like this: ./resources/templates/against_security_ver_cards_tarot_lang.idml

Then...

python scripts/convert.py -t tarot -l en -lt cards  -v 1.00 -e against-security -d -i ./resources/templates/against_security_ver_cards_tarot_lang.idml -o cards-against_security_1.0_cards_tarot_en.idml

If you have Images and fonts make sure to place them in the same folder as your idml file, then zip it and send it to whoever you want.

We would love to hear about your projects, don't be afraid, get in touch with us, you can send us a question to our Github forum.

OWASP Cornucopia

Uncover the security flaws in your software's design before the bad guys do it for you! Get your team together on a call or in a room and use OWASP Cornucopia Web & Mobile, Elevation of Privilege or Elevation of MLSec and OWASP Cumulus to secure your AI models and Cloud infrastructure respectively and guide your threat modelling at copi.owasp.org, and if you visit our code repository please give us a star ⭐️.

Learn how to play OWASP Cornucopia:

OWASP is a non-profit foundation that envisions a world with no more insecure software. Our mission is to be the global open community that powers secure software through education, tools, and collaboration. We maintain hundreds of open source projects, run industry-leading educational and training conferences, and meet through over 250 chapters worldwide.