🇫🇷 Version Française
Release v1.0.0
📋 Résumé
Application Web Vulnérable pour les tests de sécurité applicative. Cette application implémente intentionnellement les 10 vulnérabilités critiques du OWASP Top 10 (2021).
✨ Fonctionnalités
Vulnérabilités OWASP Top 10 Implémentées :
- ✅ A01:2021 - Broken Access Control
- ✅ A02:2021 - Cryptographic Failures
- ✅ A03:2021 - Injection (SQL, XSS, Command)
- ✅ A04:2021 - Insecure Design (XXE)
- ✅ A05:2021 - Security Misconfiguration
- ✅ A06:2021 - Vulnerable Components (Log4Shell)
- ✅ A07:2021 - Authentication Failures
- ✅ A08:2021 - Data Integrity Failures
- ✅ A09:2021 - Logging Failures
- ✅ Bonus - Path Traversal, File Upload, Command Injection
📦 Installation
# Option 1: WAR file
cp vulnerable-app-1.0.0.war /path/to/tomcat/webapps/
# Option 2: Docker
docker load -i vulnerable-web-app-1.0.0-docker.tar
docker run -d -p 8080:8080 vulnerable-web-app:1.0.0⚠️ Avertissement
NE JAMAIS déployer en production ou exposer sur Internet !
📚 Documentation
🇬🇧 English Version
Release v1.0.0
📋 Summary
Vulnerable Web Application for application security testing. This application intentionally implements the 10 critical vulnerabilities from OWASP Top 10 (2021).
✨ Features
OWASP Top 10 Vulnerabilities Implemented:
- ✅ A01:2021 - Broken Access Control
- ✅ A02:2021 - Cryptographic Failures
- ✅ A03:2021 - Injection (SQL, XSS, Command)
- ✅ A04:2021 - Insecure Design (XXE)
- ✅ A05:2021 - Security Misconfiguration
- ✅ A06:2021 - Vulnerable Components (Log4Shell)
- ✅ A07:2021 - Authentication Failures
- ✅ A08:2021 - Data Integrity Failures
- ✅ A09:2021 - Logging Failures
- ✅ Bonus - Path Traversal, File Upload, Command Injection
📦 Installation
# Option 1: WAR file
cp vulnerable-app-1.0.0.war /path/to/tomcat/webapps/
# Option 2: Docker
docker load -i vulnerable-web-app-1.0.0-docker.tar
docker run -d -p 8080:8080 vulnerable-web-app:1.0.0⚠️ Warning
NEVER deploy to production or expose to the Internet!
📚 Documentation
🔒 Checksums (SHA256)
$(cat release/checksums.txt)
📊 Build Information
- Build Date: $(date -u +"%Y-%m-%d %H:%M:%S UTC")
- Java Version: 11
- Maven Version: $(mvn -version | head -n 1)
- Commit: 3a9bf70