tamurashingo / rails_vuln_app_sample

README

1. Setup

You want start rails using docker, following command is enough.

$cd rails_broken_app

$docker-compose up -d

than use a browser to access localhost:3000

You'll see rails_broken_app page.

2. Usage

Rails_Broken_App has some vulnerabiliy.Use various techniques to find the vulnerability.

3. Vulnerability

3.1 XSS

Reveiw => SUBMIT

source-sink
/app/views/review/_list.html.erb

---

3.2 SQLi

products => Purchase

source-sink  
/app/controllers/cart_controller.rb

---

3.3 CSRF

Reveiw => SUBMIT

source-sink  
/app/controllers/review_controller.rb

---

3.4 OpenRedirect

Login => Login

source-sink  
/app/controllers/User/sessions_controller.rb```