Ruby

Ruby on Rails

Ruby on Rails is a server-side web application framework written in Ruby.

Popularity: According to StackOverflow’s 2022 Developer Survey, Ruby on Rails is the most popular Ruby framework that can be used to build web applications and REST APIs.

Railsgoat by OWASP

• Description: An Official OWASP Project - A vulnerable Rails application that follows the OWASP Top 10.
• Source Code: https://github.com/vulnerable-apps/railsgoat.git
• Credentials:
  • Username: admin@metacorp.com
  • Password: admin1234

Shell

git clone https://github.com/vulnerable-apps/railsgoat.git
cd railsgoat

# Start the app
docker-compose build
docker-compose run web rake db:setup
docker-compose up -d
sleep 25

# Create the App
APP=railsgoat
URL=http://localhost:3000
nightvision target create $APP $URL --type web

# Record authentication
nightvision auth playwright create $APP $URL

# run the scan
nightvision scan $APP --auth ${APP}