Class work for an SQL Security class where we are asked to build up our own applications in PHP. I've been allowed to use Ruby, thankfully! So, I'll be storing all of the code required for class on here as a backup and as reference for myself / other rubyists to learn some fun things by writing some purposely bad things. Ruby research!
Generated a silly login page with Bootstrap and Validator along with a little bit of custom javascript to determine if the username and password match the hardcoded values on the page.
This login page is obviously a bit of a joke. But, it looks good. :)
A simple application I wrote to get basic information about the local mysql server I am using:
ruby info_mysql_server.rb
The main application to complete the assignment. Creates the required database, table and the required information for the assignment.
ruby make_db_and_table_assigment.rb
Why no password for the mysql server? Leaving it extra insecure as I build up my examples for class, as I'm going to have to harden the application. I may even end up dropping mysql all together in favor of something like postgresql. Also running these examples in a VM without internet access / and even proper firewall rules setup for fun. So, I'm fairly complicated I won't have to worry about my mysql server being pwnd by the 1337 haxorz. lol
Building a total replacement for XAMPP -- I call it XSTRM! XAMPP stands for Cross-Platform (X), Apache (A), MariaDB (M), PHP (P) and Perl (P); and XSTRM stands for Cross-Platform (X), Sinatra (S), Thin (T), Ruby (R) and Mysql (M). All the Ruby all the time ( but then there's that Mysql part... oh well )!
To start the application, just run the app.rb file:
ruby app.rb
A purposely vulnerable web application built in Ruby which very sillily handles user input.
