forked from snoopysecurity/dvws
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathabout.php
49 lines (33 loc) · 1.95 KB
/
about.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="description" content="">
<meta name="author" content="">
<title>Setup Instructions</title>
<?php require("".dirname(__FILE__)."/bootstrap.php") ?>
</head>
<body>
<div id="wrapper">
<div class="col-md-3">
<?php require("".dirname(__FILE__)."/sidebar.php") ?>
</div>
<!-- Page Content -->
<div id="page-content-wrapper">
<div class="container-fluid">
<div class="row">
<div class="col-lg-12">
<h1>About</h1>
<p>This application was created mainly due to the lack of practical environments available for hacking web services. Vulnerable applications such as DVWA and Mutillidae focuses more on generic Web application vulnerabilities such as Cross-site Scripting and SQL Injection. Additionally, a Damn Vulnerable Web Services project was started by Kevin Johnson of Secure Ideas but I felt that the project lacks contributors and needs more vulnerabilities. Lastly, I have previously conducted many web service application tests always wanted a test-bed to test out payloads and scanners on web service attack vectors.</p>
<p>Contributors:
</p>
<li>Robin Wood (@digininja)</li>
<p><br>Lastly, if you want to learn more about web services and play with more vulnerable applications, checkout the following</p>
<ul>
<li><a href="https://www.youtube.com/watch?v=oPrrFNEasgE">Greg Patton -The API Assessment Primer (AppSecEU) 2015</a></li>
<li><a href="https://www.owasp.org/index.php/REST_Security_Cheat_Sheet">OWASP REST Security Cheat Sheet</a></li>
<li><a href="http://www.itsecgames.com/">bWAPP (vulnerable application)</a></li>
<li><a href="https://github.com/WebGoat/WebGoat">OWASP Webgoat 7 (vulnerable application)</a></li>
</ul>