the-art-of-hacking/websploit

This is a virtual machine (VM) created by Omar Santos for different Cybersecurity Ethical Hacking (Web Penetration Testing) training sessions .The purpose of this VM is to have a single VM lab environment with several vulnerable applications running in Docker containers; the tools that come in Kali Linux; a few additional tools; intentionally vulnerable applications running in Docker containers, and a mobile device emulator. https://websploit.h4cker.org

WebsSploit

This is a virtual machine (VM) created by Omar Santos for different Cybersecurity Ethical Hacking (Web Penetration Testing) training sessions .The purpose of this VM is to have a single VM lab environment with several vulnerable applications running in Docker containers; the tools that come in Kali Linux; a few additional tools; intentionally vulnerable applications running in Docker containers, and a mobile device emulator.

You can download WebSploit and find additional details at: https://websploit.org

This repository is mainly to keep track of feature requests and issues.

Scripts can be downloaded at https://websploit.org

websploit's Issues

v2020-01 - Port mapping mismatch

Hi,

There is a mismatch between the output of containers.sh and the actual containers' mapping ports.

The following are the WebSploit vulnerable containers and associated exposed ports.

Vuln App Container	Port
webgoat	8881
juice-shop	8882
dvwa	8883
mutillidae_2	8884
bwapp2	8885
dvna	8886
hackazon	8887
hackme-rtov	8888

IMAGE	PORTS	NAMES
santosomar/hackme-rtov	0.0.0.0:9000->80/tcp	hackme-rtov
santosomar/hackazon	0.0.0.0:6667->80/tcp	hackazon
santosomar/dvna	0.0.0.0:6666->9090/tcp	dvna
santosomar/bwapp	3306/tcp, 0.0.0.0:6665->80/tcp	bwapp2
santosomar/mutillidae_2	3306/tcp, 0.0.0.0:6664->80/tcp	mutillidae_2
santosomar/dvwa	0.0.0.0:6663->80/tcp	dvwa
santosomar/juice-shop	0.0.0.0:6662->3000/tcp	juice-shop
santosomar/webgoat	0.0.0.0:6661->8080/tcp	webgoat

OVA failing to import in VMWare due to 2.0 OVF format.

OVA failing to import in VMWare due to 2.0 OVF format.

Non-Interactive Install

I wanted a non-interactive install so that I can use Vagrant to spin up Websploit from Kali rolling. In install.sh, if you replace
apt install
with
DEBIAN_FRONTEND=noninteractive apt install
The script will not get stuck with trying to upgrade libc or lib6.

Thanks for the script, Omar!