This is a vulnerable Flask web application designed to provide a lab environment for people who want to improve their web penetration testing skills. It includes multiple types of vulnerabilities for you to practice exploiting. Vulnerabilities
-
HTML Injection
-
XSS
-
SSTI
-
SQL Injection
-
Information Disclosure
-
Command Injection
-
Brute Force
-
Deserialization
-
Broken Authentication
-
DOS
-
File Upload
To run the application, you will need to have Python 3 installed on your machine.
- Clone this repository to your local machine. git clone https://github.com/videvelopers/Vulnerable-Flask-App.git
- Navigate to the cloned directory. cd Vulnerable-Flask-App
- Run the Flask application.
- Clone this repository to your local machine. git clone https://github.com/videvelopers/Vulnerable-Flask-App.git
- Navigate to the cloned directory. cd Vulnerable-Flask-App
- Run the Flask application.
This application is for educational purposes only. Use it at your own risk. The author is not responsible for any damage caused by this application. Do not run this application on a production server.