A Demo platform for playing about with vulnerabilities.
This software is deliberately built insecure to allow the demonstration of problems.
You can then fix them or exploit them.
To run on your machine run with docker compose like this:
docker-compose up -d
This will mount the source directory so that you can run the latest code.
Note that you need to create SSL certificates to make use of the nginx, see instructions in WORKSTATION-SETUP.md.
The SCENARIOS.md file contains ideas for things to do with this site.
If you want more information on the security problems presented on this site take a look at READING-LIST.md.