jeancarlor/meowna repository overview

An intentional app with several vulnerabilities:

XSS - Cross-Site Scripting CSRF - Cross-Site Request Forgery SSRF - Server-Side Request Forgery IDOR - Insecure Direct Object Reference LFI - Local File Inclusion RFI - Remote File Inclusion LFD - Local File Download BLH - Broken Link Hijacking No Rate Limit OS Command Injection Open Redirect Unrestricted File Upload Tabnabbing Clickjacking HTML Injection Information Disclosure

Develop by https://github.com/ismael0liveira/meowna⁠

how to run: docker run -p 8000:8000 jeancarlor/meowna

after access http://localhost:8000/⁠