Skip to content

A sample web application to demonstrate typical web security vulnerabilities for training purpose

License

Notifications You must be signed in to change notification settings

bitbytemaster/mysecureweb

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

24 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

mysecureweb

A sample web application created to demonstrate typical web security vulnerabilities for secure web development training purposes

Implementation Technologies:

- Linux (CentOS 6.5), Apache, MySQL 14.14, Python 2.6.7 - Apache Python WSGI module (mod_wsgi 3.4) - web.py 0.37 - jQuery 1.11.0

Security Vulnerabilities to illustrate:

- Sensitive Data Exposure - not fail intelligently - Injection (lack proper input validation) - sql injection - XML injection (XML parser) - directory traversal - Cross-site scripting (XSS) - Cross-site request forgery (csrf) - Insecure Direct Object Reference - clickjacking

About

A sample web application to demonstrate typical web security vulnerabilities for training purpose

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published