{"id":16652104,"url":"https://github.com/jdcasey/httpd-dojo","last_synced_at":"2025-08-22T08:09:48.680Z","repository":{"id":137441937,"uuid":"50980008","full_name":"jdcasey/httpd-dojo","owner":"jdcasey","description":"Docker container dojo for a basic Apache httpd server","archived":false,"fork":false,"pushed_at":"2016-02-03T06:44:20.000Z","size":5,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-08-13T19:14:36.619Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/jdcasey.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2016-02-03T06:44:06.000Z","updated_at":"2016-02-03T06:44:21.000Z","dependencies_parsed_at":"2023-04-25T20:47:04.629Z","dependency_job_id":null,"html_url":"https://github.com/jdcasey/httpd-dojo","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/jdcasey/httpd-dojo","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jdcasey%2Fhttpd-dojo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jdcasey%2Fhttpd-dojo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jdcasey%2Fhttpd-dojo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jdcasey%2Fhttpd-dojo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jdcasey","download_url":"https://codeload.github.com/jdcasey/httpd-dojo/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jdcasey%2Fhttpd-dojo/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":271606595,"owners_count":24788979,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-22T02:00:08.480Z","response_time":65,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-10-12T09:27:37.774Z","updated_at":"2025-08-22T08:09:48.642Z","avatar_url":"https://github.com/jdcasey.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# HTTPd Dojo\n\nThis project creates a Docker image that will start an Apache HTTPd instance configured to allow clients to retrieve webserver logs and configurations. It also contains a Python CGI that allow clients to PUT new content on the system or DELETE existing content (eg. calling `PUT /cgi-bin/content.py/path/to/some/file.html`), and another to allow clients to execute arbitrary code as root in order to fine-tune the environment prior to running an automated test (eg. calling `POST /cgi-bin/setup.py` with a shell script as the POST body).\n\nThe image is designed to be extended to host specific services, so they can be used by automated tests on the client side.\n\n## WARNING\n\nThis image is intentionally insecure. Its purpose is to support automated testing and manual exploration of a system, which requires the following abilities:\n\n* setup initial conditions for a test against the service, by executing arbitrary setup commands as `root`\n* setup initial static content to be served by the webserver, for use in automated testing\n* download the webserver configuration files for storage alongside test results\n* download the webserver logs for storage alongside test results\n\n**This image should NEVER be used as an actual hosting environment. It is EXTREMELY insecure.** You have been warned.\n\n## content.py\n\nThis CGI uses the PUT method to read the request body and store it in the sub-path under `/var/www/html` specified by the PATH_INFO of the request. It uses the DELETE method similarly, but to delete content from `/var/www/html` instead.\n\n## setup.py\n\nThis CGI listens for POST requests and reads shell script content from the request body. The content is written to a temporary shell script file under `/var/www/html/setup-scripts` then executed as root. Afterward, a timestamp and URL to the written setup script file (calculated using the requested host, port, and the tempfile path) is logged to `/var/www/html/setup-scripts/command.log`. All of these scripts (and the log) are available for the client to download and inspect afterward.\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjdcasey%2Fhttpd-dojo","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fjdcasey%2Fhttpd-dojo","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjdcasey%2Fhttpd-dojo/lists"}