https://github.com/sasanlabs/vulnerableapp-php

Vulnerable Application written in PHP
https://github.com/sasanlabs/vulnerableapp-php

apache appsec burp hacktoberfest owasp-vulnerableapp owasp-vulnerableapp-facade owasp-zap php security

Last synced: about 2 months ago
JSON representation

Vulnerable Application written in PHP

• Host: GitHub
• URL: https://github.com/sasanlabs/vulnerableapp-php
• Owner: SasanLabs
• License: apache-2.0
• Created: 2020-12-31T19:27:02.000Z (about 4 years ago)
• Default Branch: main
• Last Pushed: 2022-12-31T00:17:54.000Z (about 2 years ago)
• Last Synced: 2023-03-04T15:19:12.445Z (almost 2 years ago)
• Topics: apache, appsec, burp, hacktoberfest, owasp-vulnerableapp, owasp-vulnerableapp-facade, owasp-zap, php, security
• Language: PHP
• Homepage:
• Size: 43 KB
• Stars: 7
• Watchers: 2
• Forks: 10
• Open Issues: 9
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# ![VulnerableApp-php](https://raw.githubusercontent.com/SasanLabs/VulnerableApp/master/docs/logos/Coloured/iconColoured.png) VulnerableApp-php

[![License](https://img.shields.io/badge/License-Apache%202.0-blue.svg)](https://opensource.org/licenses/Apache-2.0) [![PRs Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen.svg?style=flat-square)](http://makeapullrequest.com) [![](https://img.shields.io/twitter/follow/sasan_karan?style=flat&logo=twitter)](https://twitter.com/intent/follow?screen_name=sasan_karan)

VulnerableApp-php is a Vulnerable Application containing vulnerabilities specific to PHP technology stack. It is part of the farm of Vulnerable Applications provided by [SasanLabs](https://github.com/SasanLabs). This Vulnerable Application utilises the facilities provided by [Owasp VulnerableApp-Facade](https://github.com/SasanLabs/VulnerableApp-facade) and it is just exposing bunch of Api's which are vulnerable to various attacks.

User Interface for VulnerableApp-php is provided by [Owasp VulnerableApp-Facade](https://github.com/SasanLabs/VulnerableApp-facade).

## How to run the project

As VulnerableApp-php doesn't provide user interface and relies on [Owasp VulnerableApp-facade](https://github.com/SasanLabs/VulnerableApp-facade) hence you need to start it using instructions: [VulnerableApp-Facade simple start](https://github.com/SasanLabs/VulnerableApp-facade#simple-start)

For building the docker image and then using [VulnerableApp-Facade](https://github.com/SasanLabs/VulnerableApp-facade#simple-start) to test the working of the application.

```

1. Build the docker image with command: docker buildx build --platform linux/amd64,linux/arm64,linux/ppc64le -t sasanlabs/owasp-vulnerableapp-php:latest . --push

2. Navigate to VulnerableApp-Facade and run it as described in VulnerableApp-Facade#simple-start

```

## Contact

Please raise a github issue for enhancement/issues in VulnerableApp-jsp or send email to [email protected] regarding queries

we will try to resolve issues asap.