thewation/cicesandbox repository overview

⁠Prerequisites

• Docker installed on your system

⁠Installation Steps

1. Pull the Docker image from Docker Hub:

docker pull thewation/cicesandbox

1. Run the Docker container:

docker run -p 8000:8000 thewation/cicesandbox

This will start the container and map port 8000 on the host to port 8000 in the container.

1. Access the web application in your browser at http://localhost:8000.

⁠Testing the Vulnerabilities

The web application provides several endpoints that you can use to test different types of vulnerabilities:

• /rce/execute/{code}: This endpoint accepts a string of Python code from the client and executes it using the exec() function. To test this endpoint, enter a Python code snippet in the input field and click the "Execute" button.

• /rce/break/{firstname}: This endpoint accepts a string from the client and executes it as Python code using the exec() function. To test this endpoint, enter a string that contains a Python code snippet in the input field and click the "Break" button.

• /ci/ping/blind/{host}: This endpoint accepts a hostname or IP address from the client and executes a ping command on the system. To test this endpoint, enter a hostname or IP address in the input field and click the "Ping (Blind)" button.

• /ci/ping/{host}: This endpoint accepts a hostname or IP address from the client and executes a ping command on the system. To test this endpoint, enter a hostname or IP address in the input field and click the "Ping" button.

Note: This web application is intended for educational and testing purposes only. Do not use it on production systems or networks. Make sure to stop the Docker container when you are done testing:

docker stop <container-id>

Replace <container-id> with the ID of the running container, which you can find using the docker ps command.