{"id":21744564,"url":"https://github.com/lmoroz/bwapp","last_synced_at":"2025-05-07T09:25:11.237Z","repository":{"id":53032460,"uuid":"143978797","full_name":"lmoroz/bWAPP","owner":"lmoroz","description":"bWAPP latest modified for PHP7 bundled with Docker container","archived":false,"fork":false,"pushed_at":"2024-09-07T09:04:26.000Z","size":21252,"stargazers_count":52,"open_issues_count":4,"forks_count":71,"subscribers_count":3,"default_branch":"master","last_synced_at":"2025-03-31T08:38:45.958Z","etag":null,"topics":["bwapp","owasp","owasp-top-10","pentesting","security-vulnerability"],"latest_commit_sha":null,"homepage":"","language":"PHP","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/lmoroz.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2018-08-08T07:43:16.000Z","updated_at":"2025-03-23T16:34:23.000Z","dependencies_parsed_at":"2024-04-02T12:41:38.857Z","dependency_job_id":"bd26972a-500f-4aea-872e-7f448bd200c5","html_url":"https://github.com/lmoroz/bWAPP","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lmoroz%2FbWAPP","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lmoroz%2FbWAPP/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lmoroz%2FbWAPP/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lmoroz%2FbWAPP/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/lmoroz","download_url":"https://codeload.github.com/lmoroz/bWAPP/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":252849186,"owners_count":21813785,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bwapp","owasp","owasp-top-10","pentesting","security-vulnerability"],"created_at":"2024-11-26T07:11:56.566Z","updated_at":"2025-05-07T09:25:11.211Z","avatar_url":"https://github.com/lmoroz.png","language":"PHP","funding_links":[],"categories":[],"sub_categories":[],"readme":"\r\n# bWAPP latest modification for PHP7.4 bundled into Docker container\r\n## No preparation needed\r\n\r\n1. Run docker container with following command:\r\n\r\n`docker-compose up -d`\r\n\r\nor using Docker Desktop\r\n\r\n2. Open [http://localhost:8080/bWAPP/install.php](http://localhost:8080/bWAPP/install.php), press `here` link on the page\r\n   \r\n3. Go to [http://localhost:8080/bWAPP/login.php](http://localhost:8080/bWAPP/login.php)\r\n   \r\n4. Enjoy\r\n\r\n--------------\r\nbWAPP - README\r\n--------------\r\n\r\nbWAPP, or a buggy web application, is a deliberately insecure web application.\r\nbWAPP helps security enthusiasts, developers and students to discover and to prevent web vulnerabilities.\r\nIt prepares one to conduct successful penetration testing and ethical hacking projects.\r\nWhat makes bWAPP so unique? Well, it has over 100 web bugs!\r\nbWAPP covers all major known web vulnerabilities, including all risks from the OWASP Top 10 project!\r\nIt is for security-testing and educational purposes only.\r\n\r\nIt includes:\r\n\r\n* Injection vulnerabilities like SQL, SSI, XML/XPath, JSON, LDAP, HTML, iFrame, OS Command and SMTP injection\r\n* Cross-Site Scripting (XSS), Cross-Site Tracing (XST) and Cross-Site Request Forgery (CSRF)\r\n* Unrestricted file uploads and backdoor files\r\n* Authentication, authorization and session management issues\r\n* Arbitrary file access and directory traversals\r\n* Local and remote file inclusions (LFI/RFI)\r\n* Server Side Request Forgery (SSRF)\r\n* XML External Entity Attacks (XXE)\r\n* Heartbleed vulnerability (OpenSSL)\r\n* Shellshock vulnerability (CGI)\r\n* Drupal SQL injection (Drupageddon)\r\n* Configuration issues: Man-in-the-Middle, cross-domain policy file, information disclosures,...\r\n* HTTP parameter pollution and HTTP response splitting\r\n* Denial-of-Service (DoS) attacks\r\n* HTML5 ClickJacking, Cross-Origin Resource Sharing (CORS) and web storage issues\r\n* Unvalidated redirects and forwards\r\n* Parameter tampering\r\n* PHP-CGI vulnerability\r\n* Insecure cryptographic storage\r\n* AJAX and Web Services issues (JSON/XML/SOAP)\r\n* Cookie and password reset poisoning\r\n* Insecure FTP, SNMP and WebDAV configurations\r\n* and much more...\r\n\r\nbWAPP is a PHP application that uses a MySQL database. It can be hosted on Linux and Windows using Apache/IIS and MySQL. It can be installed with WAMP or XAMPP.\r\n\r\nIt's also possible to download our bee-box, a custom VM pre-installed with bWAPP.\r\n\r\nThis project is part of the ITSEC GAMES project. ITSEC GAMES are a fun approach to IT security education. \r\nIT security, ethical hacking, training and fun... all mixed together.\r\nYou can find more about the ITSEC GAMES and bWAPP projects on our blog.\r\n\r\nWe offer a 2-day comprehensive web security course 'Attacking \u0026 Defending Web Apps with bWAPP'.\r\nThis course can be scheduled on demand, at your location!\r\nMore info: http://goo.gl/ASuPa1 (pdf)\r\n\r\nEnjoy!\r\n\r\nCheers\r\n\r\nMalik Mesellem\r\nTwitter: @MME_IT\r\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flmoroz%2Fbwapp","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Flmoroz%2Fbwapp","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flmoroz%2Fbwapp/lists"}