WebSec Teaching Labs

Local teaching projects for web security. The repo includes vulnerable targets, a black-box scanner, a slide deck, and Remotion explainer videos.

Use these projects only in local lab environments that you control.

Projects

Project	Location	README
VulnShop Express target and scanner	vulnshop/	vulnshop/README.md
WordPress/WooCommerce target and tools	wordpress/	wordpress/README.md
React2Shell local lab	react2shell/	react2shell/README.md
Presentation slides	presentation/	presentation/README.md
Remotion videos	video/	video/README.md

Exported tutorial videos: https://youtube.com/playlist?list=PLFzuPDjlwVmhZU6PwVXv4qjgIkRqxn7fX&si=hcRRzmQxML9lSdCw

Common Commands

# Vulnerable Express shop
cd vulnshop
pnpm install
pnpm webapp
pnpm scan http://localhost:3000

# WordPress lab
cd wordpress
pnpm install
pnpm wordpress
docker compose logs -f wp-cli
pnpm exploit status http://localhost:8080
pnpm wordpress:down

# React2Shell lab
cd react2shell
npm install
npm run dev
npm run exploit

# Presentation
cd presentation
pnpm install
pnpm dev

# Video project
cd video
pnpm install
pnpm start
pnpm build

Requirements

• Node.js 20 or newer
• pnpm for the VulnShop, WordPress, presentation, and video projects
• npm for react2shell
• Docker and Docker Compose for the WordPress target
• Playwright Chromium for the scanner and checkout automation