Labs

Damn Vulnerable File Upload

Project Link 

https://github.com/LunaM00n/File-Upload-Lab

Installation 

Windows Users (Xampp)

Download Zip file and extract into C:\xampp\htdocs\

Linux User ( /var/www/html)

git clone https://github.com/LunaM00n/File-Upload-Lab

Configuration

Make Sure in php.ini

"file_uploads = On" 
"expose_php=off"

Preview 

Author 

Thin Ba Shane ( @art0flunam00n )

Walkthrough

TBD

The Andha Lab

Project Link

https://github.com/LunaM00n/the-andha-lab

Categories

1.Blind Command Execution
2.Blind Code Injection
3.Blind Boolean Based SQL Injection
4.Blind XXE Injection
5.Blind XSS

Intallation

Download The Andha Lab file and place to C://xampp/htdocs/ or /var/www/html/. Create database named blind and import blind.sql file into this database.

Author

Thin Ba Shane ( @art0flunam00n )

Web Obfuscate Lab

Project Link

https://github.com/LunaM00n/Web-Obfuscate-Lab

Information

After reading Web Application Obfuscation Book from Syngress, I decided to make this lab for beginner who interesting in Web Application Bypass. I m not designed for Web Attack such as XSS ,SQLi. I only designed to character escape. If you are new to web application obfuscation, you can understand basic of web app obfuscation. You can see output to obfuscate.

Twitter https://twitter.com/art0flunam00n