{"id":24651677,"url":"https://github.com/jieyab89/laravuln","last_synced_at":"2025-03-20T22:26:03.524Z","repository":{"id":271682579,"uuid":"914234918","full_name":"Jieyab89/LaraVuln","owner":"Jieyab89","description":"LaraVuln, a simple web application aimed at security test labs and application development. Can be done by many test methods such as black box, white box and gray box, this web can be used for web security. ","archived":false,"fork":false,"pushed_at":"2025-02-16T15:17:33.000Z","size":22508,"stargazers_count":2,"open_issues_count":0,"forks_count":2,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-02-16T16:29:35.216Z","etag":null,"topics":["hacking","laravel","laravel-framework","laravuln","pentesting","php","php7","security","vulnerabilities","web","web-hacking","web-security","web-tools","web-vulnerabilities","web-vulnerability"],"latest_commit_sha":null,"homepage":"","language":"PHP","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Jieyab89.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2025-01-09T07:50:58.000Z","updated_at":"2025-02-16T15:21:01.000Z","dependencies_parsed_at":null,"dependency_job_id":"e5b46639-f8ce-4ebb-ac2a-dcbbf98a7ccb","html_url":"https://github.com/Jieyab89/LaraVuln","commit_stats":null,"previous_names":["jieyab89/laravuln"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Jieyab89%2FLaraVuln","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Jieyab89%2FLaraVuln/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Jieyab89%2FLaraVuln/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Jieyab89%2FLaraVuln/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Jieyab89","download_url":"https://codeload.github.com/Jieyab89/LaraVuln/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":244702268,"owners_count":20495860,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["hacking","laravel","laravel-framework","laravuln","pentesting","php","php7","security","vulnerabilities","web","web-hacking","web-security","web-tools","web-vulnerabilities","web-vulnerability"],"created_at":"2025-01-25T19:12:40.879Z","updated_at":"2025-03-20T22:26:03.517Z","avatar_url":"https://github.com/Jieyab89.png","language":"PHP","funding_links":[],"categories":[],"sub_categories":[],"readme":"# LaraVuln\n\nThis project was developed by Jieyab and the community, the purpose of this project is to create labs for web security, but it focuses on using Laravel and PHP, you can use this project to learn or modify without any credit, you can use pentest techniques such as using scanners, injection, business logic as well as several test scenarios such as black box, gray box and white box, some have missconfig in the source code and exposed information through Git and other things.\n\n# Snapshoot \n\n![image](https://github.com/user-attachments/assets/f40a7151-c76a-49d7-be8d-2aca8c4482fc)\n![image](https://github.com/user-attachments/assets/6776944f-4141-497f-ba16-7f16a3b894eb)\n\n# Requirements and Preparation\n\n1. Laragon or other web server. Recommendation use Apache or Nginx \n2. Mysql \n3. Php version 7.3 \n4. Composer \n5. Code editor \n\n# Installation\n\n1. Clone this repository \n\nSSH\n```\ngit@github.com:Jieyab89/LaraVuln.git\n```\n\nHTTPS\n```\nhttps://github.com/Jieyab89/LaraVuln.git\n```\n\n2. After that run this command \n\nOn the project folder run this \n```\ncomposer install \u0026\u0026 update\n```\n\nLinux \n```\ncp .env.example .env\n```\n\nWindows\n```\ncopy .env.example .env\n```\n\n```\nphp artisan key:generate\n```\n\n3. Edit your .env to configure database and other \n\n\u003e DB_CONNECTION=mysql\n\u003e \n\u003e DB_HOST=127.0.0.1\n\u003e \n\u003e DB_PORT=3306\n\u003e \n\u003e DB_DATABASE=your database\n\u003e \n\u003e DB_USERNAME=your username\n\u003e \n\u003e DB_PASSWORD=your password\n\u003e \n\n4. And then dont forget to migrate database \n\n```\nphp artisan migrate\n```\n\nrun db seeder for dummy data\n```\nphp artisan db:seed\n```\n\nrun your application \n\n```\nphp artisan serve\n```\n\nIf any error please let me know \n\n# Scenario Attack Simulation \n\n## Initial Access\n\nEnum port or dir on host or IP -\u003e find mysql port -\u003e crack hash \n\nIdor -\u003e leak username and email for login-\u003e brute force the password  \n\n## Foothold \n\nThere is an file upload  for rabbit hole \n\nRCE command injection or other -\u003e reverse shell \n\nMissconfig -\u003e CVE or from debugger -\u003e reverse shell \n\nSQL Injection -\u003e upload shell into outfile -\u003e revershe shell \n\ngit history -\u003e get information -\u003e reverse shell \n\n## Privilage Escalation  \n\nXSS stored -\u003e steal cookie -\u003e admin -\u003e injection -\u003e reverse shell \n\nWeak auth -\u003e login into admin -\u003e injection -\u003e reverse shell \n\nIDOR -\u003e change account data admin -\u003e injection -\u003e reverse shell \n\n*If you want make more about privilage escalation you need the settup machine \n\nThere is much tecnique for privilage escalation into host or machine for example SUID, human error, software CVE, missconfig, credential stuffing and other  \n\nTadaaaaa, vuln pwned \n\n## This Integrated with AD?\n\nMaybee not, because the AD (Active Directory) setup is quite an effort, but I have set up myself on my laptop, there is a domain controller and client. If this repository is busy and growing maybe I will make it more like a box\n\nOr you can go it self, to set up some running services, the operating system being used, as well as access to get the domain controller or root, maybe I can add in a new sub folder \n\n# Docker Script and Other Preq Script \n\n### Docker Script\n\n#### 1. Update Environment File\n\nOpen the `.env-docker.example` file and update it with your details:\n\n```plaintext\nDB_CONNECTION=mysql\nDB_HOST=127.0.0.1\nDB_PORT=3306\nDB_DATABASE=your_database\nDB_USERNAME=your_username\nDB_PASSWORD=your_password\n```\n\nReplace the placeholders with your actual database information.\n\n#### 2. Install Docker and Docker Compose\n\nIf you don't have Docker and Docker Compose installed, follow this guide for Ubuntu:\n\n- [Install Docker on Ubuntu](https://docs.docker.com/engine/install/ubuntu/#install-using-the-convenience-script)\n\n#### 3. Run Docker Compose\n\nOnce Docker is installed, run the following command in your project folder:\n\n```bash\ndocker compose up -d --build\n```\n\nThis will build and run your containers in the background.\n\n\u003e please make sure the php container service is totally up.\n\u003e use `docker logs php` command to see the latest output before accessing application.\n\n#### 4. Wait for Initialization\n\nWait 1-2 minutes for the containers to be fully set up.\n\nYou can access the application by accessing: http://localhost:8080\n\n# Reset Application \n\nMake sure your in folder application \n\nrun \n```\nphp reset_database.php\n```\n\nthen \n```\nphp artisan serve\n```\n\n# Update the Application \n\n1. You can run this command \n\n```\ngit fetch \n```\n\nthen \n\n```\ngit pull \n```\n\nAfter that check the update. Does it match the commit? If it matches then the update is complete and you have the latest version.\n\n# Troubleshoot with Laragon \n\nThere are several options to run Laravel, you can use artisan, or directly by excute index.php. If you want to run without artisan here is the easiest way \n\n1. Seeting the Laragon Apache web server config \n\nApache.conf  \n\nEmable mod_rewrite.so\n```\nLoadModule rewrite_module modules/mod_rewrite.so \n```\n\n2. Change the document root with your project name \n\n![image](https://github.com/user-attachments/assets/f5cc137b-a4f2-447e-a767-96800f211510)\n\n3. Then save, after that restart the Laragon \n\n4. Access it on web browser \n\n![image](https://github.com/user-attachments/assets/c1f8656b-4f68-4f97-b5d3-50c285b3f4d2)\n\n5. Change ip to domain \n\nLinux \n```\nsudo mousepad /etc/hosts \n```\n\nAdd like below\n\nExample \n```\n\u003cIP\u003e  laravuln.local\n```\n\nWindows\n\nOpen this file using notepad \n\n```\nc:/windows/system32/drives/etc/hosts\n```\n\nAdd like below\n\nExample \n```\n\u003cIP\u003e  laravuln.local\n```\n\nThen save it \n\nHere example image \n\nLinux \n\n![image](https://github.com/user-attachments/assets/155ff40a-6973-4682-b13d-40f07339bab2)\n\nWindows \n\n![image](https://github.com/user-attachments/assets/fd6b53f6-58de-4a5d-8e99-046c13c7c6ec)\n\n# Other \n\nIf my code is bad and there are some mistakes, feel free to be corrected. As in the repository everything, thank you for your corrections and contributions, if any problem please let me know\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjieyab89%2Flaravuln","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fjieyab89%2Flaravuln","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjieyab89%2Flaravuln/lists"}