{"id":19626975,"url":"https://github.com/brookr/goof","last_synced_at":"2025-10-06T01:08:03.859Z","repository":{"id":196903011,"uuid":"697402271","full_name":"brookr/goof","owner":"brookr","description":null,"archived":false,"fork":false,"pushed_at":"2023-12-13T17:30:58.000Z","size":1361,"stargazers_count":0,"open_issues_count":19,"forks_count":0,"subscribers_count":1,"default_branch":"develop","last_synced_at":"2023-12-13T19:07:12.159Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/brookr.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2023-09-27T16:50:52.000Z","updated_at":"2023-12-20T16:29:42.104Z","dependencies_parsed_at":"2023-10-03T13:24:25.460Z","dependency_job_id":"74f3a90c-9f6b-44ce-8209-c7d9b3132c70","html_url":"https://github.com/brookr/goof","commit_stats":null,"previous_names":["brookr/goof"],"tags_count":0,"template":null,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/brookr%2Fgoof","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/brookr%2Fgoof/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/brookr%2Fgoof/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/brookr%2Fgoof/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/brookr","download_url":"https://codeload.github.com/brookr/goof/tar.gz/refs/heads/develop","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":240926398,"owners_count":19879737,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-11T11:48:09.686Z","updated_at":"2025-10-06T01:07:58.826Z","avatar_url":"https://github.com/brookr.png","language":"Java","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Goof - Snyk's vulnerable demo app repo\n[![Known Vulnerabilities](https://snyk.io/test/github/snyk/goof/badge.svg?style=flat-square)](https://snyk.io/test/github/snyk/goof)\n\nWelcome to the Snyk \"Goof\" vulnerable demo application repo.\nThis repository contains a pair of purposefully vulnerable applications used for the purpose of demonstrating Snyk's capabilities in finding and fixing vulnerabilities in your dependencies and container images.\nThis repo is used as part of several Snyk Snyk workshops including:\n* https://container-security-snyk.awsworkshop.io/\n* https://snyk-labs.github.io/snyk-gcp-container-live-hack\n\n---\n## WARNING! | ACHTUNG! | ¡PRECAUCIÓN! | !AVERTISSEMENT!\nMany of the applications that are part of this workshop are **highly dangerous**\nand are purposely built with vulnerabilities! Please, **do not deploy these examples to\nclusters that you don't want to have attacked!**\n\nIn other words, only deploy these to local/sandboxed clusters for the sole purpose of experimentation.\nExamples of places you should **NOT** deploy this to:\n* your developer servers\n* your QA environment\n* your company's cloud account\n\nWe take no responsibility for exploitation or damages caused by deploying anything from this\nrepository (or the associated container images) to your personal or organization's infrastructure (private or public).\n\n## You have been warned!\n\n---\n\n### Contents\nApplications included in this repo:\n* [thumbnailer](thumbnailer) - Python application deployed in a container who's base image contains a vulnerable version of ImageMagick.\n* [todolist](todolist) - Java JEE application with many vulnerable dependencies, including the Log4Shell vulnerability and an implementation of a malicous LDAP server for exploting it.\n\n_Note: This README is a WIP, and will be updated with more information soon._\n\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbrookr%2Fgoof","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fbrookr%2Fgoof","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbrookr%2Fgoof/lists"}