https://github.com/ronin-rb/vuln-apps

A collection of simple vulnerable web apps for testing vulnerability scanners or educational purposes.
https://github.com/ronin-rb/vuln-apps

docker examples hacktoberfest help-wanted infosec jsp php vulnerabilities web-vulnerabilities

Last synced: about 1 month ago
JSON representation

A collection of simple vulnerable web apps for testing vulnerability scanners or educational purposes.

• Host: GitHub
• URL: https://github.com/ronin-rb/vuln-apps
• Owner: ronin-rb
• License: mit
• Created: 2023-02-28T02:01:03.000Z (over 3 years ago)
• Default Branch: main
• Last Pushed: 2024-08-04T09:26:25.000Z (almost 2 years ago)
• Last Synced: 2025-06-05T07:53:50.357Z (12 months ago)
• Topics: docker, examples, hacktoberfest, help-wanted, infosec, jsp, php, vulnerabilities, web-vulnerabilities
• Language: PHP
• Homepage:
• Size: 29.3 KB
• Stars: 3
• Watchers: 1
• Forks: 0
• Open Issues: 7
• Metadata Files:
  • Readme: README.md
  • License: LICENSE.txt

Awesome Lists containing this project

README

          
# vuln-apps

## Description

A collection of simple vulnerable web apps for testing vulnerability scanners or

educational purposes.

## Apps

* `cmdi/`

  * [php/](cmdi/php) - A PHP app demonstrating various types of Command

    Injection.

* `lfi/`

  * [php/](lfi/php) - A PHP app demonstrating various types of Local File

    Inclusion (LFI).

* `rfi/`

  * [php/](rfi/php) - A PHP app demonstrating Remote File Inclusion (RFI).

  * [jsp/](rfi/jsp) - A JSP/Tomcat app demonstrating Remote File Inclusion

    (RFI).

* `sqli/`

  * [php/](sqli/php) - A PHP app demonstrating various types of SQL injections

    (SQLi).

* `open_redirect/`

  * [php/](open_redirect/php) - A PHP app demonstrating Open Redirect

    vulnerabilities.

## Contributing

### New Apps

* Must exist within a directory.

* Must contain a `Dockerfile` to build the app as a docker image.

* Must contain a `docker-compose.yml` file for quickly starting up the docker

  image.

* Must contain a `Makefile` for building the docker image and running either

  the app or the docker image.

* Must contain an `index.html` page which describes the vulnerability and links

  to the vulnerable webpage.

* Must contain a `README.md` file containing basic instructions on how to run

  and view the web app.