https://github.com/samuraiwtf/plugin-labs
A set of labs for classes about extending interception proxy tools such as ZAP or Burp Suite.
https://github.com/samuraiwtf/plugin-labs
Last synced: about 1 year ago
JSON representation
A set of labs for classes about extending interception proxy tools such as ZAP or Burp Suite.
- Host: GitHub
- URL: https://github.com/samuraiwtf/plugin-labs
- Owner: SamuraiWTF
- Created: 2020-10-05T15:00:05.000Z (over 5 years ago)
- Default Branch: main
- Last Pushed: 2020-10-05T15:15:47.000Z (over 5 years ago)
- Last Synced: 2025-02-15T00:25:47.397Z (over 1 year ago)
- Language: HTML
- Size: 13.7 KB
- Stars: 0
- Watchers: 3
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Plugin Labs
## Overview
The purpose of this project is to produce a series of web application scenarios for finding web application security flaws using
an interception proxy (such as OWASP ZAP or BurpSuite). The scenarios are mostly corner cases where the standard interception
proxy functionality is insufficient, and therefore requires a custom plugin or extension. These scenarios can also be solved
with custom scripts that run outside of the interception proxy.
## Running
The easiest way to use this lab is to run it in a Docker container. To do this, clone this repository then build and start
the docker container. For example:
```
docker build -t plugin-lab . && docker run -p 127.0.0.1:8081:3000 plugin-lab
```
Then you should be able access the lab on port localhost:8081.
_Requires Docker_