Formazione| Web Application Penetration Testing

Requisiti

• Docker
• docker-compose

Web

• Webgoat : localhost:8080/WebGoat
• Mutillidae : localhost:8088/mutillidae
• DVWAP : localhost:8081
• bwapp : localhost:8082/install.php
• Juice-Shop : localhost:8083
• NinjaWeb : localhost:8899
• VulnWordpress : localhost:8086

Monitoraggio

Puoi monitorare i tuoi servizi o container con cAdvisor, questa è una nuova integrazione. basta seguire i seguenti passaggi: 1 Apri il tuo Browser. 2 Nella barra di ricerca scrivi localhost:8085. 3 Fatto, puoi visualizzare le informazioni sui tuoi container.

locañhost:8085

Modalità d'uso.

git clone https://github.com/MoisesTapia/TWAPT
cd TWAPT
docker-compose up -d

output

➜  TWAPT git:(deploy) ✗ docker-compose up -d      
Creating network "twapt_pentesting" with driver "bridge"
Creating juiceshop ... done
Creating webgoat   ... done
Creating dvwap     ... done
Creating bwapp     ... done
Creating bricks    ... done
Creating owasp17   ... done
Creating ninjaweb  ... done
➜  TWAPT git:(deploy) ✗ 

'docker-compose ps'

➜  TWAPT git:(deploy) ✗ docker-compose ps
  Name                 Command               State                          Ports                        
---------------------------------------------------------------------------------------------------------
bricks      /run.sh                          Up      3306/tcp, 0.0.0.0:8084->80/tcp                      
bwapp       /run.sh                          Up      3306/tcp, 0.0.0.0:8082->80/tcp                      
dvwap       /main.sh                         Up      0.0.0.0:8081->80/tcp                                
juiceshop   docker-entrypoint.sh npm start   Up      0.0.0.0:8083->3000/tcp                              
ninjaweb    /bin/sh -c /usr/sbin/apach ...   Up      0.0.0.0:8899->80/tcp                                
owasp17     /usr/bin/supervisord             Up      3306/tcp, 0.0.0.0:443->443/tcp, 0.0.0.0:8088->80/tcp
webgoat     java -Djava.security.egd=f ...   Up      0.0.0.0:8080->8080/tcp                              
➜  TWAPT git:(deploy) ✗ 

Arresto dei servizi

'docker-compose stop o docker-compose down'

Contributori

Design: @onahump / https://github.com/onahump