theand-fork / bwapp-code Goto Github PK
View Code? Open in Web Editor NEWclone of http://sourceforge.net/projects/bwapp/
clone of http://sourceforge.net/projects/bwapp/
-------------- bWAPP - README -------------- bWAPP, or a buggy web application, is a deliberately insecure web application. bWAPP helps security enthusiasts, developers and students to discover and to prevent web vulnerabilities. It prepares one to conduct successful penetration testing and ethical hacking projects. What makes bWAPP so unique? Well, it has over 60 web bugs! bWAPP covers all major known web vulnerabilities, including all risks from the OWASP Top 10 project! It is for security-testing and educational purposes only. It includes: */ Injection vulnerabilities like SQL, SSI, XML/XPath, JSON, LDAP, HTML, OS Command and SMTP injection */ Cross-Site Scripting (XSS), Cross-Site Tracing (XST) and Cross-Site Request Forgery (CSRF) */ Unrestricted file uploads and backdoor files */ Authentication, authorization and session management issues */ PHP-CGI and OpenSSL (heartbleed) vulnerabilities */ Arbitrary file access and directory traversals */ Local and remote file inclusions (LFI/RFI) */ Server Side Request Forgery (SSRF) */ XML External Entity Attacks (XXE) */ Configuration issues: Man-in-the-Middle, cross-domain policy file, information disclosures,... */ HTTP parameter pollution and HTTP response splitting */ Denial-of-Service (DoS) attacks */ HTML5 ClickJacking, Cross-Origin Resource Sharing (CORS) and web storage issues */ Unvalidated redirects and forwards */ Parameter tampering */ Insecure cryptographic storage */ AJAX and Web Services issues (JSON/XML/SOAP) */ Cookie and password reset poisoning */ Insecure FTP, SNMP and WebDAV configurations */ and much more... bWAPP is a PHP application that uses a MySQL database. It can be hosted on Linux and Windows using Apache/IIS and MySQL. It can be installed with WAMP or XAMPP. It's also possible to download our bee-box, a custom VM pre-installed with bWAPP. This project is part of the ITSEC GAMES project. ITSEC GAMES are a fun approach to IT security education. IT security, ethical hacking, training and fun... all mixed together. You can find more about the ITSEC GAMES and bWAPP projects on our blog. We offer a 2-day comprehensive web security course 'Attacking & Defending Web Apps with bWAPP'. This course can be scheduled on demand, at your location! More info: http://goo.gl/ASuPa1 (pdf) We also offer a 4-hour workshop 'Plant the Flags with bWAPP', with the focus on attack techniques. Master modern martial arts and become a web ninja :) Perfect for your conference, convention or group event. More info: http://goo.gl/fAwCex (pdf) Enjoy! Cheers Malik Mesellem Twitter: @MME_IT
I use a bee-box
in LDAP injetion, i don't know how to connet server LDAP
Fatal error: Uncaught mysqli_sql_exception: Unknown database 'bwapp' in C:\xampp\htdocs\bWAPP\install.php:40 Stack trace: #0 C:\xampp\htdocs\bWAPP\install.php(40): mysqli_select_db(Object(mysqli), 'bWAPP') #1 {main} thrown in C:\xampp\htdocs\bWAPP\install.php on line 40
unable to login to bwapp.
Invalid credentials or user not activated.
tried using bee/bug
So, I've recently installed bWAPP. The first bugs worked fine, but when I want to start an SQL-injection attack it throws me this error:
Fatal error: Uncaught Error: Call to undefined function mysql_connect() in D:\xampp\htdocs\bWAPP\connect.php:23 Stack trace: #0 D:\xampp\htdocs\bWAPP\sqli_1.php(23): include() #1 {main} thrown in D:\xampp\htdocs\bWAPP\connect.php on line 23
This is the line in the connect.php that throws an error:
// Connects to the server
$link = mysql_connect($server, $username, $password);
I run bWAPP locally, why should it connect to a server? Any ideas?
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.