CSRF-Protector-PHP
mutillidae
| CSRF-Protector-PHP | mutillidae | |
|---|---|---|
| 1 | 5 | |
| 211 | 1,178 | |
| - | - | |
| 0.0 | 7.8 | |
| almost 2 years ago | 3 months ago | |
| PHP | PHP | |
| GNU General Public License v3.0 or later | GNU General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
CSRF-Protector-PHP
-
Trying to add CSRF Protection to my PHP Project
OWASP Documentation: https://github.com/mebjas/CSRF-Protector-PHP/wiki/How-to-use
mutillidae
-
If you're looking for resources pertaining to hands-on practical demonstrations of learned skills and tools/techniques, look no further.
There's also a bunch of intentionally vulnerable Webapps and VMs aimed at demonstrating potential footholds and common exploits leading to owning of the host including but not limited to: bWAPP, Damn Vulnerable Web App, WebGoat, Metasploitable 3, Mutillidae, Juice Shop
- Web App Pentesting Course
-
What is the best linux distro for begginers?
I would recommend getting an Ubuntu server VM and installing Mutillidae (and/or OWASP Juice Shop). First learn how to configure and harden your Ubuntu server. Then add it to an internal network with a few other VMs and examine what happens, how they communicate, etc. Then open up your Kali and have some fun with Mutillidae or Juice Shop.
-
Teaching question: making an unsafe site available to students?
We use OWASPs Mutillidae.
-
Question
The WAHH contains a pretty solid baseline for understanding web vulnerabilities, but the latest version is from 2011 so it's missing a decade of new techniques. It's not a terrible place to start since a lot of the fundamentals haven't changed in a while, but you'll definitely want to look into things like (as mentioned in another comment) the Web Security Academy as a next step. Other fun options are the OWASP Juice Shop and Mutillidae applications.
What are some alternatives?
awesome-appsec - A curated list of resources for learning about application security
DVWA - Damn Vulnerable Web Application (DVWA)
DneustadtCsrfCookieBundle - Symfony bundle that provides Cross Site Request Forgery (CSRF or XSRF) protection for client-side applications
juice-shop - OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
Open-Source-Security-Guide - Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.
flexio-web-app - Flex.io Web App
WhatWeb - Next generation web scanner
laravel-electron - Making Laravel desktop application using Electron Js
faraday - Open Source Vulnerability Management Platform
SecureCodingDojo - The Secure Coding Dojo is a platform for delivering secure coding knowledge.
sqli-postgres-rce-privesc-hacking-playground - Application with SQL Injection vulnerability and possible privilege escalation. Free vulnerable app for ethical hacking / penetration testing training.
codewars.com - Issue tracker for Codewars