PHP

VulnLab

Description: A web vulnerability lab developed in PHP.
Source Code: https://github.com/vulnerable-apps/VulnLab
Findings: Cross-Site Scripting (Reflected), SQL Injection, Relative Path Confusion.
Credentials: None

git clone https://github.com/vulnerable-apps/VulnLab
cd VulnLab

# Run the application
# Option 1: Use the pre-built container
docker run --name vulnlab -d -p 1337:80 yavuzlar/vulnlab:latest

# Option 2: Build the container
docker build -t yavuzlar/vulnlab .
docker run -d -p 1337:80 --name vulnlab yavuzlar/vulnlab

# Run the scan
nightvision target create vulnlab http://localhost:1337 --type web
nightvision scan vulnlab

# Stop the container
docker stop vulnlab
docker rm vulnlab