| FazBrowse GitHub Viewer | Trending | | Home |
| Tools: [Download Repo ZIP] [Original HTTPS Page] |
| Name | Name | Last commit date | ||
|---|---|---|---|---|
flask-webgoat is a deliberately-vulnerable application written with the Flask web framework.
(_(
/_/'_____/)
" | |
|""""""|
███████╗██╗ █████╗ ███████╗██╗ ██╗ ██╗ ██╗███████╗██████╗ ██████╗ ██████╗ █████╗ ████████╗
██╔════╝██║ ██╔══██╗██╔════╝██║ ██╔╝ ██║ ██║██╔════╝██╔══██╗██╔════╝ ██╔═══██╗██╔══██╗╚══██╔══╝
█████╗ ██║ ███████║███████╗█████╔╝ ██║ █╗ ██║█████╗ ██████╔╝██║ ███╗██║ ██║███████║ ██║
██╔══╝ ██║ ██╔══██║╚════██║██╔═██╗ ██║███╗██║██╔══╝ ██╔══██╗██║ ██║██║ ██║██╔══██║ ██║
██║ ███████╗██║ ██║███████║██║ ██╗ ╚███╔███╔╝███████╗██████╔╝╚██████╔╝╚██████╔╝██║ ██║ ██║
╚═╝ ╚══════╝╚═╝ ╚═╝╚══════╝╚═╝ ╚═╝ ╚══╝╚══╝ ╚══════╝╚═════╝ ╚═════╝ ╚═════╝ ╚═╝ ╚═╝ ╚═╝
python -m venv .venv . .venv/bin/activate pip install -r requirements.txt FLASK_APP=run.py flask run
This project contains the following vulnerabilities:
You can find each one in the codebase by grepping for the string vulnerability:
$ grep vulnerability . -R -n | grep -v README ./flask_webgoat/actions.py:43: # vulnerability: Remote Code Execution ./flask_webgoat/users.py:37: # vulnerability: SQL Injection ./flask_webgoat/auth.py:17: # vulnerability: SQL Injection ./flask_webgoat/actions.py:60: # vulnerability: Insecure Deserialization ./flask_webgoat/actions.py:35: # vulnerability: Directory Traversal ./flask_webgoat/auth.py:45: # vulnerability: Open Redirect ./flask_webgoat/__init__.py:12: # vulnerability: Sensitive Data Exposure ./run.py:7: # vulnerability: Broken Access Control ./run.py:9: # vulnerability: Security Misconfiguration
| Back | FazBrowse Home | New Git URL |