Curious Vulnerability Web Application is A simple insecure blog made for LCAS to learn about secure web applications.
$ git clone [email protected]:ClavinJune/CVWebApp.git
$ cd ./CVWebApp
# import create+insert.sql to your MySQL
# edit file core/bootstrap.php depends on your machine
$ php -S 0.0.0.0:8000
# then, open in your browser at http://localhost:8000
- PHP v7.0.0~
- MySQL v15.0~
- bulma.io v0.7.2 (included)
- fontawesome-free v5.6.3 (included)
- jQuery v3.3.1 (included)
- Stored XSS Attack
- HTML Injection
- PHP Secure Web Programming (Encryption, Prepared Statement, etc)
- SQL Injection
- CSRF Attack
- AJAX Injection
So it might be possible for new learners to attack this blog.
username | password |
---|---|
admin | admin |
user | user |