greyhatpentester/vulnerable-app repository overview

⁠HealthCare SaaS – Vulnerable EMR Platform for Pentesting Training

This is a deliberately vulnerable web application designed for security assessments and penetration testing training.

⁠Warning

This application contains intentional security vulnerabilities.

Do not deploy it in a production environment. It is intended to run in a controlled local lab environment for educational purposes only.

⁠Purpose

This system was created to provide a simple and repeatable lab environment for learning and practicing web application penetration testing. It allows students, security engineers, and bug bounty beginners to safely test common web security issues in a controlled setup.

⁠Architecture

To simulate realistic interactions, this application environment is divided into two components:

1. Vulnerable HealthCare SaaS (Port 9001)
2. Custom Email Sandbox (Port 9002)

⁠Default Credentials

The platform is pre-seeded with two default accounts across both the HealthCare Web Application and the Email Sandbox:

• Admin (Staff): [email protected] | Password: Test@123!@#
• Standard (Patient): [email protected] | Password: Test@123!@#

⁠How to Run the Lab

Ensure Docker is installed on your system. To install Docker:

sudo apt update && sudo apt install docker.io -y && sudo systemctl enable docker --now

If you encounter errors while running the above commands, use:

sudo sed -i 's|http://http.kali.org|https://http.kali.org|' /etc/apt/sources.list && sudo apt-get clean && sudo apt-get update --fix-missing

Pull the Docker image:

sudo docker pull greyhatpentester/vulnerable-app

Run the container:

sudo docker run -p 9001:9001 -p 9002:9002 greyhatpentester/vulnerable-app

After the container starts, access:

• Vulnerable HealthCare SaaS: http://localhost:9001⁠
• Email Sandbox: http://localhost:9002⁠

⁠Workflow

• Register a new account in the vulnerable HealthCare application (Port 9001).
• The application enforces a Staff Approval process for new signups instead of automatic account activation.
• Submitting a registration request triggers a notification email to the pre-seeded admin account.
• Log in to the email sandbox (Port 9002) using [email protected] to review the notification.
• Then, log in to the HealthCare web application using the same staff credentials to access the Admin Panel and approve the pending user.

Note: The custom email server running on port 9002 is not intended for security testing. You are only authorized to test the vulnerable web application running on port 9001.