secureaks/vulnerablesymfony repository overview

⁠Intended Vulnerable Symfony

This project is a vulnerable Symfony application intended to be used for security training purposes.

⁠Deployment

You can deploy the application on your machine with following command:

docker run -d --name vulnerablesymfony -p 8000:80 secureaks/vulnerablesymfony:latest

The application will be available at http://localhost:8000⁠.

You can get further details on our GitHub repository: https://github.com/Secureaks/VulnerableSymfony⁠

⁠List of vulnerabilities

You can find below the list of vulnerabilities available in the application. The source code available on the GitHub repository is also documented to allow you to understand how the vulnerabilities are implemented.

• Server Side Request Forgery and Remote Code Execution in the referer header on / and /post/{post}
• Stored XSS on comment parameter on /post/{post}/comment
• Reflected XSS and SQL Injection on search parameter on /search
• Local File Inclusion on p parameter on legal/content
• SQL Injection on email parameter on /login
• User enumeration on /register
• Missing right control on /user/role/{user}
• Missing right control on /user/delete/{user}
• Missing right control on /user/password/{user}
• Missing right control leading to privilege escalation on /user/email/{user}
• File Upload - No extension check on /user/avatar/{user}
• Server Side Request Forgery on the url parameter on /user/avatar/url/{user}
• Missing right control on /user/avatar/delete/{user}
• Command injection on the extension of the uploaded file on /user/avatar/resize/{user}
• Server Side Template Injection on /user/about
• Sensitive endpoint intended to be used through SSRF on /local
• Technical information disclosure on /info.php
• Directory listing if using the option Options +Indexes on the vhost configuration
• Mass assignment on /user/edit/ leading to privilege escalation
• Privilege escalation through a cron job

⁠Credits

This project is provided by Secureaks⁠.

⁠Contributing

If you want to contribute to this project, fill free to open an issue or a pull request with your changes.

⁠License

This project is licensed under the ATTRIBUTION-NONCOMMERCIAL-SHAREALIKE 4.0 INTERNATIONAL (CC BY-NC-SA 4.0) license.

You are free to:

• Share — copy and redistribute the material in any medium or format
• Adapt — remix, transform, and build upon the material

The licensor cannot revoke these freedoms as long as you follow the license terms.

Under the following terms:

• Attribution — You must give appropriate credit , provide a link to the license, and indicate if changes were made . You may do so in any reasonable manner, but not in any way that suggests the licensor endorses you or your use.
• NonCommercial — You may not use the material for commercial purposes .
• ShareAlike — If you remix, transform, or build upon the material, you must distribute your contributions under the same license as the original.

No additional restrictions — You may not apply legal terms or technological measures that legally restrict others from doing anything the license permits.

See the LICENSE⁠ file on the Github repository for details.