Cyber Gym

Deliberately vulnerable PHP scripts for Web Security training

An array of vulnerable Web pages to test security tools or manual assessment.

Usage (Docker)

Prerequisites

• Docker and docker-compose

Setup

1. Clone this repository
   • git clone https://github.com/AvalZ/cyber-gym.git or
   • git clone [email protected]:AvalZ/cyber-gym.git or
   • download the zip from here and unzip it in a local folder.
2. cd cyber-gym/ (or cd cyber-gym-master if you downloaded the zip)
3. docker-compose up
4. Browse http://127.0.0.1:8080
5. Create a table named 'accounts' or go to http://127.0.0.1:8080/db/setup_db.php
6. Done!

Usage (Vagrant)

Prerequisites

• Virtualbox
• Vagrant

Setup

1. Clone this repository
   • git clone https://github.com/AvalZ/cyber-gym.git or
   • git clone [email protected]:AvalZ/cyber-gym.git or
   • download the zip from here and unzip it in a local folder.
2. cd cyber-gym/ (or cd cyber-gym-master if you downloaded the zip)
3. vagrant up
4. Browse http://192.168.33.10
5. Create a table named 'accounts' or go to http://192.168.33.10/db/setup_db.php
6. Done!

Useful links

• Slides - Common Attacks
• mysqli_real_escape_string gotchas
• Slides - Web Security Hands-on

ZenHackademy

• Part 1 - Client-Side Security
• Part 2 - Server-Side Security