AvalZ / cyber-gym

Deliberately vulnerable scripts for Web Security training

Cyber Gym

Deliberately vulnerable PHP scripts for Web Security training

An array of vulnerable Web pages to test security tools or manual assessment.

Usage (Docker)

Prerequisites

• Docker and docker-compose

Setup

1. Clone this repository
   • git clone https://github.com/AvalZ/cyber-gym.git or
   • git clone [e-mail]:AvalZ/cyber-gym.git or
   • download the zip from here and unzip it in a local folder.
2. cd cyber-gym/ (or cd cyber-gym-master if you downloaded the zip)
3. docker-compose up
4. Browse http://127.0.0.1:8080
5. Create a table named 'accounts' or go to http://127.0.0.1:8080/db/setup_db.php
6. Done!

Usage (Vagrant)

Prerequisites

• Virtualbox
• Vagrant

Setup

1. Clone this repository
   • git clone https://github.com/AvalZ/cyber-gym.git or
   • git clone [e-mail]:AvalZ/cyber-gym.git or
   • download the zip from here and unzip it in a local folder.
2. cd cyber-gym/ (or cd cyber-gym-master if you downloaded the zip)
3. vagrant up
4. Browse http://192.168.33.10
5. Create a table named 'accounts' or go to http://192.168.33.10/db/setup_db.php
6. Done!

Useful links

• Slides - Common Attacks
• mysqli_real_escape_string gotchas
• Slides - Web Security Hands-on

ZenHackademy

• Part 1 - Client-Side Security
• Part 2 - Server-Side Security