This is free vulnerable app for novice pentesters & developers to experiment with SQL Injection vulnerability and privilege escalation.
Recommended path:
- exploit the SQLi vulnerability
- get shell via vulnerable version of PostgreSQL
- perform privilage escalation and become root 🥂
Applications can be exploited in many different ways:
1 minute installation on a virtual machine or VPS with Linux.
Linux@amd64 (Intel processors):
docker run -p 8091:80 -d filipkarc/sqli-postgres-rce-privesc-hacking-playground
Linux@AppleSilicon (tested on Apple M1):
docker run -p 8091:80 -d filipkarc/sqli-postgres-rce-privesc-hacking-playground:arm64apple
After 2 minutes, it should be visible in the browser: http://127.0.0.1:8091
Follow me on Twitter @FilipKarc and on LinkedIn: LinkedIn.
