{"id":39217815,"url":"https://github.com/foundeo/cfml-security-training","last_synced_at":"2026-01-17T23:25:13.362Z","repository":{"id":45877217,"uuid":"68141475","full_name":"foundeo/cfml-security-training","owner":"foundeo","description":"An INSECURE example website for use in CFML security training.","archived":false,"fork":false,"pushed_at":"2024-01-22T15:20:55.000Z","size":1755,"stargazers_count":28,"open_issues_count":1,"forks_count":10,"subscribers_count":11,"default_branch":"master","last_synced_at":"2024-03-26T14:32:05.756Z","etag":null,"topics":["cfml","coldfusion"],"latest_commit_sha":null,"homepage":"https://foundeo.com/consulting/coldfusion/","language":"ColdFusion","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/foundeo.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2016-09-13T19:43:32.000Z","updated_at":"2023-03-27T11:23:01.000Z","dependencies_parsed_at":"2022-07-22T20:22:17.396Z","dependency_job_id":null,"html_url":"https://github.com/foundeo/cfml-security-training","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/foundeo/cfml-security-training","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/foundeo%2Fcfml-security-training","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/foundeo%2Fcfml-security-training/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/foundeo%2Fcfml-security-training/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/foundeo%2Fcfml-security-training/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/foundeo","download_url":"https://codeload.github.com/foundeo/cfml-security-training/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/foundeo%2Fcfml-security-training/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28522053,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-17T22:11:28.393Z","status":"ssl_error","status_checked_at":"2026-01-17T22:11:27.841Z","response_time":85,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cfml","coldfusion"],"created_at":"2026-01-17T23:25:10.515Z","updated_at":"2026-01-17T23:25:13.355Z","avatar_url":"https://github.com/foundeo.png","language":"ColdFusion","funding_links":[],"categories":[],"sub_categories":[],"readme":"# cfml-security-training\n\nThis is a CFML web application that intentionally contains many many security vulnerabilties for training purposes. It is used in [Foundeo's ColdFusion Security Training Course](https://foundeo.com/consulting/coldfusion/security-training/).\n\nHere's a listing of some of the vulnerabilities you can find in this application:\n\n* SQL Injection \n* Cross Site Scripting (XSS)\n* Path Traversals\n* Remote Code Execution\n* File Upload Vulnerabilities\n* Insecure Password Storage\n* Cross Site Request Forgery\n* Insufficient Authentication/Authorization\n* Timing Attacks\n\n## Setup / Installation\n\n*Please run this in a virtual machine and keep restricted to localhost so you do not compromise your computer.*\n\nRequires CF11+ or Lucee 4.5+.\n\n\n### Clone / Download Repository\n\n\tcd /somewhere/\n\tgit clone https://github.com/foundeo/cfml-security-training.git .\n\n### Install CommandBox\n\nWe'll use commandbox or `box` for short to spin up a local CFML server. You can download it here: [https://www.ortussolutions.com/products/commandbox#download](https://www.ortussolutions.com/products/commandbox#download), please read the [commandbox installation docs](https://ortus.gitbooks.io/commandbox-documentation/content/setup/installation.html) for more info.\n\n### Start CFML Server\n\nStart up a CFML server, using commandbox you can just do:\n\n\tcd wwwroot\n\tbox server start cfengine=adobe@2016\n  \nThe above will start up a CF2016 server on a random port number and open your default web browser to the server.\n\n\n### Optional: MySQL Setup\n\nBy default it is setup to use Apache Derby, which should work well for Adobe ColdFusion engines (since it is included by default). If you are using Lucee or want to use MySQL instead of Derby please follow these instructions:\n\n1) Create a empty database called `bankofinsecurity`\n\n2) Create a user account `bankofi` with password `bankofi` \n\n3) If running on Adobe ColdFusion you will need to add the MySQL database driver to your lib directory in `~/.CommandBox/server/{server-id}/adobe-{version}/WEB-INF/lib`\n\n## History / About\n\nSome of this work was inspired by the [_HackableType_](https://github.com/twelverobots/HackableType) application buily by Pete Freitag \u0026 Jason Dean way back \nin 2010. This is an attempt to modernize and simplify.\n\nIf you are in need of CFML security training at your organization, please contact [Foundeo Inc.](https://foundeo.com/contact/)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffoundeo%2Fcfml-security-training","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ffoundeo%2Fcfml-security-training","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffoundeo%2Fcfml-security-training/lists"}