Yaksas Security

Cyber Security Research

Web App Pentesting using BodgeIt Store (Part 1)

Leave a Comment

Web App Pentesting using BodgeIt Store (Part 1)

This video shows how to set up the lab environment for this YCSC Let’s Learn series. It covers installing Docker on Kali Linux 2019.4, pulling and running the BodgeIt Store docker image from Docker Hub.
A virtual image of Kali Linux could be downloaded from https://www.offensive-security.com/kali-linux-vm-vmware-virtualbox-image-download/

What is BodgeIt Store?

A vulnerable web application aimed at beginners in web penetration testing

Technology stack:

  • Java
  • Servlet engine

Installation options:

  • Virtual Machine
  • Docker

GitHub Link: https://github.com/psiinon/bodgeit

Vulnerabilities

It includes the following vulnerabilities:

  • Cross Site Scripting
  • SQL injection
  • Hidden (but unprotected) content
  • Cross Site Request Forgery
  • Debug code
  • Insecure Object References
About the series
In this Let’s Learn series, we cover the web application penetration testing process end to end, from scoping to report. We will be using The BodgeIt Store, a beginner level vulnerable-by-design application, to demonstrate a complete penetration test.

Related Posts

Categories

Tags

(ISC)2 Active directory adsecurity adsi adsisearcher adversary emulation Android attack active directory awareness blue whale challenge Certification CISSP Cloud security crte crtp cyber-warfare cybersecurity Cyber Security Cybersecurity books domain enumeration ethical hacking forest enumeration hacker Information Security ISACA Kali Linux Mobile Security Narendra Modi NSA offensive security Online Safety opsec Password Penetration Testing pentest powersploit Powerview privacy red team red teaming Risk Management Social Engineering user enumeration Wifi Windows

Top Posts